Ukey factor resetting method and device, electronic equipment and storage medium

Abstract

The invention relates to the technical field of communication, in particular to a ukey factor resetting method and device, electronic equipment and a storage medium, when a resetting request of a user for a ukey factor of a target ukey is received, whether the ukey state of the ukey factor is an unused state or not is judged, when it is determined that the ukey state is the unused state, whether the target ukey has an original ukey application or not is judged, and if yes, the ukey factor is reset. When it is determined that the original ukey application exists in the target ukey, whether a ukey handle exists in the target ukey or not is judged, when it is determined that the ukey handle exists in the target ukey, whether a ukey factor exists in the target ukey or not is judged, and when it is determined that the ukey factor exists in the target ukey, the ukey factor is reset. According to the method and the device, through a multi-layer judgment mechanism mode, including ukey state judgment, ukey application judgment, ukey handle judgment and factor judgment, ukey factor resetting is realized on the premise of ensuring that ukey factors are not maliciously modified, the function of resetting the ukey factors for infinite times is achieved, and ukey equipment and system maintenance is easy.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a method, device, electronic device and storage medium for resetting a ukey factor. Background Art

[0002] ukey is a USB encryption device with a built-in microcontroller or smart card chip. It has a certain amount of storage space and can store the user's private key and digital certificate. It uses the public key algorithm built into ukey to authenticate the user's identity.

[0003] In the field of video security, the existing GB 28181 protocol, onvif protocol, and rtsp protocol all have security issues. The authentication is simple, and the lower-level domain does not need to authenticate the upper-level domain. It is easy to forge the upper-level domain and steal important information. Therefore, GB 35114 is further used for two-way authentication, using the national encryption methods SM1, SM2, SM3 and SM4 to ensure that the authentication process is not tampered with, and the upper-level domain cannot be forged to steal information. In order to avoid mobile systems, devices, and hardware from changing the ukey factor, the ukey authentication factor can only be written once after leaving the factory to prevent arbitrary modification and expose problems, resulting in the inability to reset the ukey factor in subsequent replacement scenarios, and the maintenance cost becomes high. Summary of the invention

[0004] In order to overcome the shortcomings of the prior art, the present invention provides a ukey factor resetting method, device, electronic device and storage medium, which can reset the ukey factor infinitely under the premise that the ukey factor will not be maliciously modified, thereby reducing maintenance costs.

[0005] A first aspect of the present application provides a method for resetting a ukey factor, the method comprising: When receiving a reset request from a user for a ukey factor of a target ukey, obtaining a ukey status of the target ukey; When it is determined that the ukey state is in an unused state, determining whether the target ukey has an original ukey application; When it is determined that the target ukey has the original ukey application, determining whether the target ukey has a ukey handle; When it is determined that the target ukey has the ukey handle, determining whether the target ukey has the ukey factor; When it is determined that the target ukey has the ukey factor, the ukey factor is reset.

[0006] In an optional implementation, the resetting of the ukey factor includes: Deleting the original ukey application and clearing the application data of the original ukey application; Create a new ukey application for the target ukey.

[0007] In an optional embodiment, the method further comprises: When it is determined that the target ukey does not have the original ukey application, the operation of resetting the ukey factor is performed; When it is determined that the target ukey does not have the ukey handle, the operation of resetting the ukey factor is performed.

[0008] In an optional implementation, before obtaining the ukey status of the target ukey, the method further includes: Determining a request source of the reset request, and determining a user identity of the user based on the reset request; Verify whether the request source is legitimate, and obtain a first verification result; Determine whether the user has the right to use the target ukey based on the user identity verification, and obtain a second verification result; When both the first verification result and the second verification result are successful verifications, the operation of obtaining the ukey status of the target ukey is performed.

[0009] In an optional embodiment, the method further comprises: Building a remote management platform for managing the target ukey, wherein the remote management platform is in communication connection with the target ukey; When the remote management platform receives the login instruction from the user, it obtains the operation information of the target ukey; The operation information is displayed to the user through the remote management platform, so that the user can manage the target ukey based on the operation information.

[0010] In an optional implementation, the reset parameters corresponding to the reset request and the automated reset tool corresponding to the reset parameters are determined; Testing the automated reset tool to obtain a test result; When it is determined that the test result is a success, the automated reset tool is deployed to the remote management platform, so that the user can manage the target ukey based on the automated reset tool.

[0011] A second aspect of the present application provides a ukey factor resetting device, the device comprising: An acquisition module, configured to acquire the ukey status of a target ukey upon receiving a reset request from a user for a ukey factor of the target ukey; A first judgment module is used for judging whether there is an original ukey application on the target ukey when it is determined that the ukey state is unused; The second judgment module is used for judging whether the target ukey has a ukey handle when it is determined that the target ukey has the original ukey application; A third judgment module is used to judge whether the target ukey has the ukey factor when it is determined that the target ukey has the ukey handle; The reset module is used to reset the ukey factor when it is determined that the target ukey has the ukey factor.

[0012] A third aspect of the present application provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of the ukey factor resetting method when executing the computer program.

[0013] A fourth aspect of the present application provides a computer-readable storage medium having a computer program stored thereon, which implements the steps of the above-mentioned ukey factor resetting method when the computer program is executed by a processor.

[0014] In summary, the ukey factor resetting method, device, electronic device and storage medium provided by the present application, when receiving a user's ukey factor reset request for a target ukey, determine whether the ukey status of the ukey factor is in an unused state; when it is determined that the ukey status is in an unused state, determine whether the target ukey has an original ukey application; when it is determined that the target ukey has an original ukey application, determine whether the target ukey has a ukey handle; when it is determined that the target ukey has a ukey handle, determine whether the target ukey has a ukey factor; when it is determined that the target ukey has a ukey factor, reset the ukey factor; through a multi-layer judgment mechanism, including ukey status judgment, ukey application judgment, ukey handle judgment and factor judgment, it is ensured that the ukey factor is reset without being maliciously modified, so that the function of resetting the ukey factor can be achieved unlimited times, which is easy to maintain ukey devices and systems. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] Figure 1It is a schematic diagram of the architecture of a ukey factor resetting system shown in an embodiment of the present application; Figure 2 is a flow chart of a method for resetting a ukey factor shown in an embodiment of the present application; Figure 3 This is a data interaction diagram of a method for resetting a ukey factor shown in an embodiment of the present application; Figure 4 is another flow chart of a method for resetting a ukey factor shown in an embodiment of the present application; Figure 5 It is a functional module diagram of a ukey factor resetting device shown in an embodiment of the present application; Figure 6 It is a structural schematic diagram of an electronic device shown in an embodiment of the present application. DETAILED DESCRIPTION

[0016] The present invention is further described below in conjunction with the accompanying drawings and embodiments.

[0017] The following will clearly and completely describe the concept, specific structure and technical effects of the present invention in combination with the embodiments and drawings, so as to fully understand the purpose, characteristics and effects of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, other embodiments obtained by technicians in this field without creative work are all within the scope of protection of the present invention. In addition, all the connection / connection relationships involved in the patent do not refer to the direct connection of components, but refer to the formation of a better connection structure by adding or reducing connection accessories according to the specific implementation situation. The various technical features in the invention can be combined interchangeably without conflicting with each other.

[0018] Reference Figure 1 , which is a schematic diagram of the architecture of a ukey factor resetting system shown in an embodiment of the present application.

[0019] The ukey factor reset system includes a software layer and a hardware layer, wherein the software layer includes a special SDK and a ukeySDK, the special SDK is responsible for interacting with the upper layer application, and calling the lower layer ukeySDK to complete the specific reset operation, the ukeySDK is a software development kit related to the ukey device, which provides an interface for communicating with the ukey hardware and the necessary function implementation. The ukey hardware layer is composed of actual ukey devices, which usually include an encryption chip and necessary interfaces for storing and managing security information (such as keys, certificates, etc.). In the ukey factor reset system of the embodiment of the present application, the ukey hardware layer is responsible for receiving instructions from the ukeySDK and performing corresponding operations (such as resetting the ukey factor).

[0020] Specifically, when the upper-layer application needs to reset the ukey factor, a reset request is sent through the special SDK. After receiving the reset request, the special SDK will parse the parameters in the reset request (such as the ukey identifier, the type of factor to be reset, etc.), and call the interface provided by the ukeySDK to initiate the reset operation. After receiving the reset request from the special SDK, the ukeySDK will communicate with the ukey hardware layer through a specific communication protocol. After receiving the reset instruction from the ukeySDK, the ukey hardware layer will perform the corresponding operation to reset the ukey factor and return the operation result to the ukeySDK. After receiving the operation result from the ukey hardware layer, the ukeySDK will encapsulate the result into a response message and return it to the upper-layer application through the special SDK.

[0021] Reference Figure 2 As shown, it is a flow chart of a ukey factor resetting method shown in an embodiment of the present application, and the ukey factor resetting method includes the following steps.

[0022] S21, when a reset request for a ukey factor of a target ukey is received from a user, a ukey status of the target ukey is obtained.

[0023] Among them, the target ukey refers to any ukey device, and the ukey factor refers to the authentication factor corresponding to the ukey device. In an embodiment of the present application, by bypassing the existing software black box SDK, direct communication with the hardware ukey device is performed to reset the ukey factor. Among them, the software black box SDK is a packaged software library that provides users with an easy-to-use interface to access the ukey device. Specifically, in order to communicate directly with the target ukey, the electronic device can use a USB device access library, such as libusb (in Linux system) or other similar libraries (in Windows or macOS system) to send and receive raw USB data packets, thereby bypassing the software black box SDK and communicating directly with the hardware of the target ukey. Therefore, the electronic device can directly perform low-level operations on the ukey, such as resetting it, by bypassing the software black box SDK.

[0024] The user can send a specific USB data packet to the target ukey based on the client construction to trigger its reset mechanism. When the electronic device listens to and receives the user's reset request, the udev library of Linux or the corresponding library of Windows can be used to find the ukey device connected to the electronic device, identify the target ukey through the VID (vendor ID) and PID (product ID) of the ukey device, and establish a direct communication channel with the target ukey through the USB interface, and read its current state (called ukey state) from the hardware register of the target ukey, and determine whether the ukey state is marked as "in use". If it is in use, further operations are refused to avoid affecting existing business. In other embodiments, the electronic device can use the udev mechanism of the Linux system to automatically identify and mount the ukey device by writing corresponding udev rules and executing scripts. Once the ukey is identified and mounted, the ukey can be directly operated through the system interface, including reading the status of the ukey, application information, etc.

[0025] In an optional implementation, before obtaining the ukey status of the target ukey, the method further includes: Determining a request source of the reset request, and determining a user identity of the user based on the reset request; Verify whether the request source is legitimate, and obtain a first verification result; Determine whether the user has the right to use the target ukey based on the user identity verification, and obtain a second verification result; When both the first verification result and the second verification result are successful verifications, the operation of obtaining the ukey status of the target ukey is performed.

[0026] Refer to Figure 4 In some embodiments, when a reset request for a ukey factor is received from a user or an application, the electronic device needs to verify the received reset request and the user's identity to prevent being attacked. Specifically, the electronic device first verifies whether the request source of the reset request is legal, that is, ensures that the reset request comes from a trusted user or application, and obtains a first verification result. For example, verify whether the IP address of the reset request is in the trusted IP address list, and / or when the reset request uses HTTPS or other security protocols, verify whether the digital certificate of the reset request is valid and trusted, and / or when the reset request comes from a specific application, verify whether its application identifier (such as application ID, application key, etc.) is legal, etc. Next, extract the user's identity information from the reset request, called user identity, including user name, user ID, key, etc., and use a database query statement (such as SQL) to query the permission database based on the user's user identity to obtain the permission to operate the target ukey. According to the query result, verify whether the user has the permission to operate the target ukey, and obtain a second verification result. For example, verify whether the user belongs to a role or user group with permission to operate the target ukey, and / or verify whether the user has a specific permission tag or permission code, etc. Among them, the permission database is a database system that stores and manages permission information, which records which users or entities have the permission to perform which operations (such as read, write, reset, etc.) on which resources (such as ukey devices). By querying the permission database, the electronic device can verify whether the requester has the permission to perform a specific operation. Finally, the electronic device can decide whether to allow the user to operate the target ukey based on the verification result, and give the corresponding processing result. That is, when the first verification result and the second verification result are both successful, the subsequent operations will continue to be performed, such as checking the ukey status, creating an application, etc., but if any of the first verification result and the second verification result is a verification failure, the electronic device returns the verification failure information and terminates the subsequent operations.

[0027] In other embodiments, the electronic device may also verify the format and content of the reset request to check whether the format and content of the reset request are as expected, that is, to ensure that the request has not been tampered with or forged. For example, verify whether the data format (such as JSON, XML, etc.) of the reset request is correct, and / or use methods such as checksum, hash value or digital signature to verify whether the content of the reset request has been tampered with, and / or verify whether the parameters in the reset request are complete, valid, and in accordance with business logic, etc.

[0028] Through the above optional implementation, by verifying the legitimacy of the source of the reset request and the user's identity and the authority to operate the ukey, unauthorized access and malicious attacks are effectively prevented, ensuring that the source of the request is credible, and querying the authority database to verify the user's authority. The double verification mechanism enhances security. When the verification fails, the operation is terminated in time and the failure information is returned, ensuring the stability of the system and the security of user data.

[0029] S22, when it is determined that the ukey status is unused, determining whether the target ukey has an original ukey application.

[0030] Among them, ukey application refers to a safe space generated by changing its hardware registers through external communication through a program burned into ukey. This space can operate the handle factor. Figure 4 In some embodiments, before directly operating the target ukey, it is necessary to read the ukey status of the target ukey and verify the ukey status, that is, check whether the target ukey is marked as "in use". If the target ukey is in the "in use" state, it means that the target ukey is currently occupied by an application or process, and the reset operation cannot be performed to avoid affecting the existing business. At the same time, the electronic device can return a corresponding error message or prompt the user that the target ukey is being used and terminate subsequent operations. When the ukey status is marked as "unused", the electronic device can further check whether there is a specific application space on the target ukey, called the original ukey application.

[0031] In some embodiments, when the original ukey application does not exist on the ukey, the electronic device can create a hardware application space unique to the target ukey, that is, use the hardware function of the ukey to create a new application space, called a new ukey application, and generate a corresponding ukey handle, and return a reset success. When the ukey application does not exist, the operable register involved is not used. After the creation, the register is re-operated to generate a usable space, and a ukey handle that can operate the ukey factor is generated. If there is a ukey application but no ukey handle is generated, it means that the ukey application creation failed and returns a reset failure.

[0032] Through the above optional implementation, by reading the ukey status and performing status authentication, it is ensured that the ukey can be operated safely when it is not occupied and has a specific application space, avoiding business interference and improving the accuracy and security of the operation.

[0033] S23, when it is determined that the target ukey has the original ukey application, determine whether the target ukey has a ukey handle.

[0034] Among them, the ukey handle is a pointer or reference used by the operating system to identify and manage resources (such as files, devices, etc.), that is, a unique identifier used to identify and access the ukey application. After creating a ukey application, a handle will be created automatically. The handle is a reference to a series of safe methods that can indirectly operate the ukey factor on a layer encapsulated on the ukey factor. And each time a ukey application is created, the location of the register operation is different, and the location of the ukey factor is different, which can only be found through the ukey handle.

[0035] Refer to Figure 4 In some embodiments, when it is determined that the original ukey application exists, it is necessary to further determine whether the ukey handle of the ukey application exists. When the ukey handle does not exist, the electronic device needs to perform a reset operation, that is, to create a hardware application space specific to the target ukey based on the same embodiment as step S22.

[0036] S24, when it is determined that the target ukey has the ukey handle, determining whether the target ukey has the ukey factor.

[0037] Among them, ukey factor refers to the authentication factor corresponding to ukey. Figure 4 In some embodiments, when it is determined that the ukey handle exists, the electronic device needs to further determine whether the ukey factor exists. If the ukey factor does not exist, it means that the current ukey does not need to be reset. At this time, the electronic device can return a corresponding error message or prompt the user that no reset is required.

[0038] S25, when it is determined that the target ukey has the ukey factor, the ukey factor is reset.

[0039] Refer to Figure 4In some embodiments, if the ukey factor exists, it means that the ukey needs to be reset. The electronic device can delete the existing original ukey application and its corresponding application data on the target ukey, and recreate the hardware application space unique to the target ukey as a new ukey application based on the same embodiment as step S22. At the same time, a new ukey factor is generated and sent to the user through a secure channel, and the old ukey factor is invalidated. When the above operations are completed, it indicates that the ukey factor is reset successfully, and the electronic device can return the ukey reset success information. Under hardware settings and software settings, the ukey factor can only be written once by the ukey handle operation, and subsequent ukey handles can only be read. Deleting the ukey factor requires deleting the entire ukey application space. Therefore, the electronic device can achieve the function of unlimited reset by finding the encryption key mounted by udev and directly entering the ukey to modify the ukey factor.

[0040] Through the above optional implementation method, through a multi-layer judgment mechanism, the request source and user permissions of the reset request are first verified, then the ukey status and ukey application space are checked, and finally the existence of the ukey handle and ukey factor is confirmed, which effectively prevents unauthorized access and malicious attacks, and at the same time avoids resetting operations when the ukey is occupied or does not meet specific conditions, thereby ensuring the stability of the system and the security of user data, and ensuring that the ukey factor modification operation is only performed when it is determined that the ukey factor can be modified, which can effectively prevent malicious modification and erroneous modification.

[0041] In an optional embodiment, the method further comprises: Building a remote management platform for managing the target ukey, wherein the remote management platform is in communication connection with the target ukey; When the remote management platform receives the login instruction from the user, it obtains the operation information of the target ukey; The operation information is displayed to the user through the remote management platform, so that the user can manage the target ukey based on the operation information.

[0042] In some embodiments, the user can build a remote management platform through the client and connect the target ukey to the remote management platform so that the target ukey establishes a communication connection with the remote management platform, and the user can manage the target ukey through the remote management platform. At the same time, the electronic device also configures the access rights and security policies of the remote management platform to ensure that only authorized users can access and manage the target ukey. That is, when the user needs to remotely monitor and manage the target ukey, first log in to the remote management platform. After the login is successful, the operation information of the target ukey can be viewed through the remote management platform, including status information, usage, etc., and the user is allowed to perform corresponding operations based on the operation information (such as restart, upgrade and configuration management, etc.). Specifically, the remote management platform can provide the function of remotely restarting the target ukey to ensure that it can be quickly restored when there is a problem with the target ukey. And the remote management platform supports remote push software updates to ensure that the target ukey always runs the latest version. And the remote management platform allows users to remotely modify the configuration of the target ukey, such as security policies, access control, etc. In addition, electronic devices can also use the logging function of the remote management platform to record all operation logs on the target ukey, including login, logout, configuration changes, etc., and record key events on the target ukey, such as device failure, abnormal login, etc.

[0043] Through the above optional implementation methods, by building a remote management platform, remote monitoring and management of the target ukey is achieved. Users can view ukey operation information in real time, perform operations such as restart, upgrade, and configuration management, which improves management efficiency. At the same time, by configuring access rights and security policies, it ensures that only authorized users can access, enhances security, and the log function records all operations, which is convenient for problem tracking and compliance inspection.

[0044] In an optional embodiment, the method further comprises: Determining reset parameters corresponding to the reset request and an automated reset tool corresponding to the reset parameters; Testing the automated reset tool to obtain a test result; When it is determined that the test result is a success, the automated reset tool is deployed to the remote management platform, so that the user can manage the target ukey based on the automated reset tool.

[0045] Among them, the reset parameters may include, but are not limited to, reset frequency, reset trigger conditions, and reset required parameters, etc. In some embodiments, the electronic device can select a suitable programming language (such as Python, Java, etc.) to develop an automated reset tool based on the reset parameters of the ukey factor reset and the interface and communication protocol of the target ukey, such as an automated reset script, so as to implement communication with the target ukey, identity authentication, ukey factor reading and writing, and other functions by writing code. Specifically, the electronic device first tests the automated reset tool in a safe test environment to ensure that it can correctly perform the reset operation. When the test result is a successful test, the automated reset tool is deployed to the remote management platform of the user's client device so that the user can remotely manage the target ukey based on the automated reset tool. When the test result is a test failure, the electronic device continues to repair the automated reset tool.

[0046] In some embodiments, the electronic device may also be provided with a monitoring mechanism to monitor the running status and results of the automated reset tool or script in real time, and regularly maintain and update the automated reset tool or script to ensure that it can continue to run stably.

[0047] Through the above optional implementation methods, by determining the reset parameters and corresponding tools, testing and deploying the automated reset tools, remote automated reset management of the ukey factor is achieved, management efficiency and security are improved, and reliability and stability of the tool before deployment are ensured.

[0048] Reference Figure 3As shown in the figure, when a user needs to reset the ukey factor of a ukey device, the user initiates an HTTP request through the Web front-end interface and sends the HTTP request to the gateway device, where the goal of the HTTP request is to reset a certain ukey device. After receiving the reset request from the Web front-end, the gateway device forwards the reset request to the authentication server to ensure that the request is initiated by a legitimate user and requires authentication. The authentication server authenticates the received reset request. If the authentication is successful, the status query is displayed as "authentication successful", ensuring that only legitimate users can reset the ukey device. After the authentication is successful, the user can query the running status of the ukey device. After the status query is successful, the user will obtain a usable key, which is used for subsequent operations to reset the ukey factor. Further, the user can use the obtained key to directly operate the ukey device through the Web front-end to reset the ukey factor. In each of the above steps, there will be clear status indications and responses. For example, after the authentication is successful, there will be a status query result of "authentication successful"; after the status query is successful, there will be a usable key as the return result; finally, the operation of resetting the ukey factor will also have a corresponding result returned.

[0049] Compared with the existing technology, this application uses the ukey SDK and ukey features, combined with a security gateway, to operate the ukey on the web front-end page. There is no need to log in to the designed serial port, and the execution code of multiple computer languages ​​can call the operation. It fundamentally solves the design that the ukey authentication factor can only be written once in the original software, so that multiple resets and uses of the ukey factor can be achieved without returning to the factory for changes in the hardware, reducing maintenance costs.

[0050] Reference Figure 5 , which is a functional module diagram of a ukey factor resetting device shown in an embodiment of the present application.

[0051] In some embodiments, the ukey factor resetting device 50 may include a plurality of functional modules composed of computer program segments. The computer programs of the various program segments of the ukey factor resetting device 50 may be stored in a memory of an electronic device and executed by at least one processor to perform (see Figure 2The function of resetting the ukey factor (description) can be divided into multiple functional modules according to the functions performed. The functional modules may include: an acquisition module 501, a first judgment module 502, a second judgment module 503, a third judgment module 504, a reset module 505, a verification module 506 and a remote management module 507. The module referred to in this application refers to a series of computer program segments that can be executed by at least one processor and can complete fixed functions, which are stored in a memory. In this embodiment, the functions of each module will be described in detail in subsequent embodiments.

[0052] The acquisition module 501 is used to acquire the ukey status of the target ukey when receiving a reset request for the ukey factor of the target ukey from the user.

[0053] The first determination module 502 is configured to determine whether the target ukey has an original ukey application when it is determined that the ukey status is unused.

[0054] The second judging module 503 is used to judge whether the target ukey has a ukey handle when it is determined that the target ukey has the original ukey application.

[0055] The third judgment module 504 is used to judge whether the target ukey has the ukey factor when it is determined that the target ukey has the ukey handle.

[0056] The reset module 505 is used to reset the ukey factor when it is determined that the target ukey has the ukey factor.

[0057] The reset module 505 is further specifically used to: delete the original ukey application and clear the application data of the original ukey application; and create a new ukey application for the target ukey.

[0058] The reset module 505 is also used for: when it is determined that the target ukey does not have the original ukey application, executing the operation of resetting the ukey factor; when it is determined that the target ukey does not have the ukey handle, executing the operation of resetting the ukey factor.

[0059] The verification module 506 is used to: determine the request source of the reset request, and determine the user identity of the user based on the reset request; verify whether the request source is legal to obtain a first verification result; verify whether the user has the right to use the target ukey based on the user identity verification to obtain a second verification result; when the first verification result and the second verification result are both successful, perform the operation of obtaining the ukey status of the target ukey.

[0060] The remote management module 507 is used to: build a remote management platform for managing the target ukey, wherein the remote management platform is connected to the target ukey for communication; when the remote management platform receives the login instruction of the user, it obtains the operation information of the target ukey; and displays the operation information to the user through the remote management platform, so that the user can manage the target ukey based on the operation information.

[0061] The remote management module 507 is also used to: determine the reset parameters corresponding to the reset request, and the automated reset tool corresponding to the reset parameters; test the automated reset tool to obtain a test result; and when it is determined that the test result is a success, deploy the automated reset tool to the remote management platform, so that the user can manage the target ukey based on the automated reset tool.

[0062] It should be understood that the various variations and specific embodiments of the ukey factor resetting method provided in the above embodiments are also applicable to the ukey factor resetting device of the present embodiment. Through the above detailed description of the ukey factor resetting method, those skilled in the art can clearly know the implementation method of the ukey factor resetting device in the present embodiment. For the sake of brevity of the specification, it will not be described in detail here.

[0063] See also Figure 6 FIG. 1 is a schematic diagram of the structure of an electronic device according to an embodiment of the present application. In a preferred embodiment of the present application, the electronic device 6 includes a memory 61 , at least one processor 62 and at least one communication bus 63 .

[0064] Those skilled in the art should understand that Figure 6 The structure of the electronic device 6 shown does not constitute a limitation of the embodiments of the present application, and can be either a bus structure or a star structure. The electronic device 6 can also include more or less other hardware or software than shown in the figure, or a different component arrangement.

[0065] In some embodiments, the electronic device 6 is a device that can automatically perform numerical calculations and / or information processing according to pre-set or stored instructions, and its hardware includes but is not limited to microprocessors, application-specific integrated circuits, programmable gate arrays, digital processors, and embedded devices. The electronic device 6 may also include user equipment, which includes but is not limited to any electronic product that can interact with a user through a keyboard, mouse, remote control, touchpad, or voice control device, such as a personal computer, tablet computer, smart phone, digital camera, etc.

[0066] In the above embodiments provided in the present application, it should be understood that the disclosed methods, devices, computer-readable storage media, and electronic devices can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the modules is only a logical function division. There may be other division methods in actual implementation, such as multiple components or modules can be combined or integrated into another device, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or components or modules, which can be electrical, mechanical or other forms.

[0067] The components described as separate components may or may not be physically separated, and the components shown as components may or may not be physical modules, that is, they may be located in one place or distributed on multiple network modules. Some or all of the components may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0068] In addition, each functional module in each embodiment of the present invention may be integrated into one processing module, or each component may exist physically separately, or two or more modules may be integrated into one module. The above integrated modules may be implemented in the form of hardware or in the form of software functional modules.

[0069] If the integrated module is implemented in the form of a software function module and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc. Various media that can store program codes.

[0070] It should be noted that, for the convenience of description, the aforementioned method embodiments are all described as a series of action combinations, but those skilled in the art should be aware that the present invention is not limited by the described action sequence, because according to the present invention, certain steps can be performed in other sequences or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by the present invention.

[0071] In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0072] The above is a specific description of the preferred implementation of the present invention, but the invention is not limited to the embodiments. Those skilled in the art can make various equivalent modifications or substitutions without violating the spirit of the present invention. These equivalent modifications or substitutions are all included in the scope defined by the claims of this application.

Claims

1. A method for resetting a ukey factor, characterized in that: The method comprises: When receiving a reset request from a user for a ukey factor of a target ukey, obtaining a ukey status of the target ukey; When it is determined that the ukey state is in an unused state, determining whether the target ukey has an original ukey application; When it is determined that the target ukey has the original ukey application, determining whether the target ukey has a ukey handle; When it is determined that the target ukey has the ukey handle, determining whether the target ukey has the ukey factor; When it is determined that the target ukey has the ukey factor, the ukey factor is reset.

2. The method for resetting the ukey factor according to claim 1, characterized in that: The resetting process of the ukey factor comprises: Deleting the original ukey application and clearing the application data of the original ukey application; Create a new ukey application for the target ukey.

3. The method for resetting the ukey factor according to claim 1, characterized in that: The method further comprises: When it is determined that the target ukey does not have the original ukey application, the operation of resetting the ukey factor is performed; When it is determined that the target ukey does not have the ukey handle, the operation of resetting the ukey factor is performed.

4. The method for resetting the ukey factor according to claim 1, characterized in that: Before obtaining the ukey status of the target ukey, the method further includes: Determining a request source of the reset request, and determining a user identity of the user based on the reset request; Verify whether the request source is legitimate, and obtain a first verification result; Determine whether the user has the right to use the target ukey based on the user identity verification, and obtain a second verification result; When both the first verification result and the second verification result are successful verifications, the operation of obtaining the ukey status of the target ukey is performed.

5. The method for resetting the ukey factor according to any one of claims 1 to 4, characterized in that: The method further comprises: Building a remote management platform for managing the target ukey, wherein the remote management platform is in communication connection with the target ukey; When the remote management platform receives the login instruction from the user, it obtains the operation information of the target ukey; The operation information is displayed to the user through the remote management platform, so that the user can manage the target ukey based on the operation information.

6. The method for resetting the ukey factor according to claim 5, characterized in that: The method further comprises: Determining reset parameters corresponding to the reset request and an automated reset tool corresponding to the reset parameters; Testing the automated reset tool to obtain a test result; When it is determined that the test result is a success, the automated reset tool is deployed to the remote management platform, so that the user can manage the target ukey based on the automated reset tool.

7. A ukey factor resetting device, characterized in that: The device comprises: An acquisition module, configured to acquire the ukey status of a target ukey upon receiving a reset request from a user for a ukey factor of the target ukey; A first judgment module is used for judging whether there is an original ukey application on the target ukey when it is determined that the ukey state is unused; The second judgment module is used for judging whether the target ukey has a ukey handle when it is determined that the target ukey has the original ukey application; A third judgment module is used to judge whether the target ukey has the ukey factor when it is determined that the target ukey has the ukey handle; The reset module is used to reset the ukey factor when it is determined that the target ukey has the ukey factor.

8. An electronic device, characterized in that: The invention comprises a memory, a processor and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of the ukey factor resetting method according to any one of claims 1 to 6 when executing the computer program.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the ukey factor resetting method according to any one of claims 1 to 6 are implemented.

Images