Android debugging bridge (ADB) equipment interaction method, device and system and electronic equipment
By introducing the generation and verification mechanism of identity authentication data and permission authentication data in ADB devices, the problem of unauthorized access to ADB devices is solved, achieving higher security and protection effects.
Patent Information
- Application Number
- CN202410832157.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-06-25
- Publication Date
- 2025-04-18
AI Technical Summary
In the prior art, once the public and private key of the Android debugging bridge ADB device is obtained by a user who does not have relevant permissions, it will cause the ADB device to be accessed by an unauthorized user, endangering the security of the device.
By obtaining the identity authentication data of the object to be interacted, it is sent to the second network device for verification, and generating signature data based on the permission authentication data and the identity authentication data, and sending it to the ADB device to determine whether to authorize interaction.
Through distributed encryption and multi-end authentication methods, the security of identity authentication is improved, the security of ADB devices is ensured, and unauthorized access is prevented.
Smart Images

Figure CN119848812A_ABST
Abstract
Description
Technical Field
[0001] The present disclosure relates to the field of device security technology, and in particular to an Android Debug Bridge (ADB) device interaction method, device, system and electronic device. Background Art
[0002] In the related art, a user can interact with an ADB (Android Debug Bridge) device through a pre-generated public-private key pair. In this method, once the public key or private key is obtained by a user who does not have the relevant authority, the ADB device will be accessed by unauthorized users, which may endanger the device security of the ADB device. Summary of the invention
[0003] In order to overcome the problems existing in the related art, the present disclosure provides an Android Debug Bridge (ADB) device interaction method, apparatus, system and electronic device.
[0004] According to a first aspect of an embodiment of the present disclosure, an ADB device interaction method is provided, the method being applied to a first device, the method comprising: obtaining identity authentication data of an object to be interacted with; sending the identity authentication data to a second network device; there is at least one second network device, the identity authentication data being used by each second network device to determine whether the object to be interacted with has ADB device interaction authority in combination with data sent by the first network device, the identity authentication data being also used by each second network device to determine whether the object to be interacted with has the ADB device interaction authority, and generating authority authentication data in combination with a pre-acquired partial key, a pre-acquired authentication public key, and a pre-acquired authentication parameter after determining that the object to be interacted with has the ADB device interaction authority; obtaining the authority authentication data returned by the second network device; generating signature data based on the authority authentication data and the identity authentication data; and sending the signature data to the ADB device.
[0005] In one implementation, the generating of signature data based on the permission authentication data and the identity authentication data includes: determining whether the amount of the permission authentication data is greater than or equal to a preset quantity threshold; in response to the amount of the permission authentication data being greater than or equal to the quantity threshold, verifying each of the permission authentication data based on the identity authentication data; determining the second network device corresponding to the permission authentication data that passes the verification as the target second network device; and performing data aggregation on the permission authentication data corresponding to the target second network device to obtain the signature data.
[0006] In an optional implementation, the identity authentication data includes a first string, which is generated by the ADB device and sent to the first device, and the verification of each permission authentication data based on the identity authentication data includes: obtaining a first calculation parameter based on the first string and a preset first calculation method; obtaining a second calculation parameter corresponding to each second network device according to a preset second calculation method based on the first calculation parameter, the pre-acquired authentication parameter corresponding to each second network device, and the permission authentication data corresponding to each second network device; wherein the authentication parameter is pre-generated by a third network device and sent to the first device; based on the second calculation parameter and the permission authentication data corresponding to each second network device, determining whether the permission authentication data corresponding to each second network device passes the verification; wherein the permission authentication data includes a first permission authentication parameter, a second permission authentication parameter, and a third permission authentication parameter.
[0007] Optionally, the data aggregating the permission authentication data corresponding to the target second network device to obtain the signature data includes: obtaining identification information of the target second network device; obtaining a signature value according to a preset third calculation method based on the first calculation parameter, the identification information and the first character string; and encapsulating the signature value to obtain the signature data.
[0008] In one implementation, the identity authentication data includes identity identification data corresponding to the object to be interacted with, and the identity identification data is used by the second network device to determine whether the object to be interacted with has ADB device interaction permission. The method also includes: providing the identity identification data to the first network device.
[0009] According to a second aspect of an embodiment of the present disclosure, an ADB device interaction method is provided, which is applied to a first network device, and includes: performing identity authentication on an object to be interacted with, and obtaining identity identification data corresponding to the object to be interacted with; in response to the object to be interacted with passing the identity authentication, sending the identity identification data to the second network device.
[0010] In one implementation, the authenticating the object to be interacted with and obtaining the identity identification data corresponding to the object to be interacted with includes: providing an interactive interface through a first device, and obtaining the identity identification data provided by the first device based on the interactive interface: wherein the interactive interface is used to authenticate the object to be interacted with.
[0011] According to a third aspect of an embodiment of the present disclosure, an ADB device interaction method is provided, the method is applied to a second network device, the second network device is at least one, the method comprising: obtaining identity authentication data of an object to be interacted with sent by the first device and first identity identification data sent by the first network device; determining whether the object to be interacted with has interaction authority of the ADB device based on the identity authentication data and the first identity identification data; determining that the object to be interacted with has interaction authority of the ADB device, and generating authority authentication data based on a pre-acquired partial private key, a pre-acquired authentication public key, a pre-acquired authentication parameter and the identity authentication data; wherein the partial private key, the authentication public key and the authentication parameter are pre-generated by a third network device and sent to the second network device, and each second network device corresponds to a different partial private key and the authentication parameter; and sending the authority authentication data to the first device.
[0012] In one implementation, the authority authentication data includes a first authority authentication parameter, a second authority authentication parameter and a third authority authentication parameter, the identity authentication data includes a first string, the first string is generated by an ADB device and sent to the first device, and the authority authentication data is generated based on a pre-acquired partial private key, a pre-acquired authentication public key, a pre-acquired authentication parameter and the identity authentication data, including: based on the first string, obtaining a first calculation parameter according to a preset first calculation method; based on the first calculation parameter and the partial private key, obtaining the first authority authentication parameter according to a preset second calculation method; determining a parameter range based on the authentication public key; obtaining a second calculation parameter from the parameter range; based on the first calculation parameter, the second calculation parameter and the authentication parameter, obtaining the second authority authentication parameter according to a preset second calculation method; wherein the authentication parameter is pre-generated by the third network device and sent to the second network device; based on the partial private key, the second calculation parameter and the second authority authentication parameter, obtaining the third authority authentication parameter according to a preset second calculation method.
[0013] In one implementation, the identity authentication data includes second identity identification data corresponding to the object to be interacted with, and determining whether the object to be interacted with has the interaction permission of the ADB device based on the identity authentication data and the first identity identification data includes: comparing the first identity identification data and the second identity identification data; in response to the first identity identification data being the same as the second identity identification data, determining that the object to be interacted with has the interaction permission of the ADB device.
[0014] According to a fourth aspect of an embodiment of the present disclosure, an ADB device interaction method is provided, the method being applied to an ADB device, the method comprising: obtaining signature data sent by a first device; verifying the signature data based on a pre-acquired authentication public key; wherein the authentication public key is pre-generated by a third network device and sent to the ADB device; determining that the signature verification is successful, and interacting with the object to be interacted with through the first device.
[0015] In one implementation, the signature data is verified based on a pre-acquired authentication public key, including: based on a pre-generated first character string, obtaining a first calculation parameter according to a preset first calculation method; based on the authentication public key and the signature data, obtaining a second calculation parameter according to a preset second calculation method; and verifying the signature based on the first calculation parameter and the second calculation parameter.
[0016] In an optional implementation, the method further includes: sending the first character string to the first device.
[0017] In an optional implementation, the method further includes: determining that the interaction with the object to be interacted with is ended, generating a new first character string; and sending the new first character string to the first device.
[0018] According to a fifth aspect of an embodiment of the present disclosure, an ADB device interaction method is provided, which is applied to a third network device, and the method includes: obtaining calculation parameters that meet preset requirements; generating an authentication public key based on the calculation parameters; generating a partial private key corresponding to each second network device based on the calculation parameters and the authentication public key; wherein, there is at least one second network device; based on the partial private key corresponding to each second network device, generating an authentication parameter corresponding to each second network device; sending the authentication public key to the ADB device; sending the authentication public key and the authentication parameter corresponding to each second network device to the first device; sending the partial private key, the authentication public key and the authentication parameter corresponding to each second network device to the corresponding second network device.
[0019] According to a sixth aspect of an embodiment of the present disclosure, an ADB device interaction method is provided, including: a third network device generates an authentication public key, a partial private key corresponding to each second network device, and an authentication parameter corresponding to each second network device; wherein the second network device is at least one; the third network device sends the authentication public key and the authentication parameter to the first device, and sends the partial private key, the authentication public key and the authentication parameter corresponding to each second network device to the corresponding second network device, and sends the authentication public key to the ADB device; the first device obtains identity authentication data of an object to be interacted with, and sends the identity authentication data to the second network device; the first network device verifies the identity of the object to be interacted with, and obtains the identity identification data corresponding to the object to be interacted with; the first network device responds to The object to be interacted with passes identity authentication and sends the identity identification data to the second network device; each of the second network devices determines whether the object to be interacted with has the interaction permission of the ADB device based on the identity authentication data and the identity identification data, and after determining that the object to be interacted with has the interaction permission of the ADB device, generates permission authentication data based on the partial private key, the authentication public key, the authentication parameters and the identity authentication data; the second network device sends the permission authentication data to the first device; the first device generates signature data based on the permission authentication data and the identity authentication data, and sends the signature data to the ADB device; the ADB device verifies the signature data based on the authentication public key, and interacts with the object to be interacted with through the first device after determining that the signature verification is successful.
[0020] According to the seventh aspect of an embodiment of the present disclosure, an ADB device interaction device is provided, which is applied to a first device, and includes: a first acquisition module, used to acquire identity authentication data of an object to be interacted with; a first sending module, used to send the identity authentication data to a second network device; a second acquisition module, used to acquire authority authentication data returned by the second network device; a first processing module, used to generate signature data based on the authority authentication data and the identity authentication data; and a second sending module, used to send the signature data to the ADB device.
[0021] In one implementation, the first processing module is specifically used to: determine whether the number of the permission authentication data is greater than or equal to a preset number threshold; in response to the number of the permission authentication data being greater than or equal to the number threshold, verify each of the permission authentication data based on the identity authentication data; determine the second network device corresponding to the verified permission authentication data as the target second network device; and perform data aggregation on the permission authentication data corresponding to the target second network device to obtain the signature data.
[0022] In an optional implementation, the identity authentication data includes a first string, which is generated by the ADB device and sent to the first device, and the first processing module is specifically used to: obtain a first calculation parameter based on the first string and a preset first calculation device; based on the first calculation parameter, the pre-acquired authentication parameter corresponding to each second network device and the permission authentication data corresponding to each second network device, obtain a second calculation parameter corresponding to each second network device according to a preset second calculation device; wherein the authentication parameter is pre-generated by a third network device and sent to the first device; based on the second calculation parameter and the permission authentication data corresponding to each second network device, determine whether the permission authentication data corresponding to each second network device passes the verification; wherein the permission authentication data includes a first permission authentication parameter, a second permission authentication parameter and a third permission authentication parameter.
[0023] Optionally, the first processing module is specifically used to: obtain identification information of the target second network device; based on the first calculation parameter, the identification information and the first character string, obtain a signature value according to a preset third calculation device; encapsulate the signature value to obtain the signature data.
[0024] In one implementation, the identity authentication data includes identity identification data corresponding to the object to be interacted with, and the identity identification data is used by the second network device to determine whether the object to be interacted with has ADB device interaction permission. The device also includes: a second processing module, which is used to provide the identity identification data to the first network device.
[0025] According to the eighth aspect of an embodiment of the present disclosure, an ADB device interaction device is provided, which is applied to a first network device, and includes: a processing module, which is used to provide an interaction interface through the first device, and obtain second identity identification data corresponding to the object to be interacted with based on the interaction interface: wherein the interaction interface is used to authenticate the object to be interacted with, and the second identification information is generated by the first device; a sending module, which is used to send the identity identification data to the second network device in response to the object to be interacted with passing the identity authentication.
[0026] In one implementation, the processing module is specifically used to: provide an interactive interface through a first device, and obtain the identity identification data provided by the first device based on the interactive interface: wherein the interactive interface is used to perform identity authentication on the object to be interacted with.
[0027] According to a ninth aspect of an embodiment of the present disclosure, there is provided an ADB device interaction apparatus, the apparatus being applied to a second network device, the second network device being at least one, the apparatus comprising: an acquisition module, for acquiring identity authentication data of an object to be interacted with sent by the first device and first identity identification data sent by the first network device; a first processing module, for determining whether the object to be interacted with has interaction rights with the ADB device based on the identity authentication data and the first identity identification data; a second processing module, for determining whether the object to be interacted with has interaction rights with the ADB device, and generating authority authentication data based on a pre-acquired partial private key, a pre-acquired authentication public key, a pre-acquired authentication parameter and the identity authentication data; wherein the partial private key, the authentication public key and the authentication parameter are pre-generated by a third network device and sent to the second network device, and each second network device corresponds to different partial private keys and authentication parameters; a sending module, for sending the authority authentication data to the first device.
[0028] In one implementation, the authority authentication data includes a first authority authentication parameter, a second authority authentication parameter and a third authority authentication parameter, the identity authentication data includes a first character string, the first character string is generated by an ADB device and sent to the first device, and the second processing module is specifically used to: based on the first character string, obtain a first calculation parameter according to a preset first calculation device; based on the first calculation parameter and the partial private key, obtain the first authority authentication parameter according to a preset second calculation device; determine a parameter range based on the authentication public key; obtain a second calculation parameter from the parameter range; based on the first calculation parameter, the second calculation parameter and the authentication parameter, obtain the second authority authentication parameter according to a preset second calculation device; based on the partial private key, the second calculation parameter and the second authority authentication parameter, obtain the third authority authentication parameter according to a preset second calculation device.
[0029] In one implementation, the identity authentication data includes second identity identification data corresponding to the object to be interacted with, and the first processing module is specifically used to: compare the first identity identification data with the second identity identification data; in response to the first identity identification data being the same as the second identity identification data, determine that the object to be interacted with has the interaction permission of the ADB device.
[0030] According to the tenth aspect of an embodiment of the present disclosure, an ADB device interaction device is provided, which is applied to an ADB device, and includes: a first acquisition module, used to acquire signature data sent by a first device; a first processing module, used to verify the signature data based on a pre-acquired authentication public key; wherein the authentication public key is pre-generated by a third network device and sent to the ADB device; and a second processing module, used to determine that the verification is successful, and interact with the object to be interacted with through the first device.
[0031] In one implementation, the first processing module is specifically used to: obtain a first calculation parameter according to a preset first calculation device based on a pre-generated first character string; obtain a second calculation parameter according to a preset second calculation device based on the authentication public key and the signature data; and verify the signature based on the first calculation parameter and the second calculation parameter.
[0032] In an optional implementation manner, the apparatus further includes: a first sending module, configured to send the first character string to the first device.
[0033] In an optional implementation, the apparatus further includes: a third processing module, configured to determine that the interaction with the object to be interacted with is ended, and generate a new first character string; and a second sending module, configured to send the new first character string to the first device.
[0034] According to the eleventh aspect of an embodiment of the present disclosure, an ADB device interaction device is provided, which is applied to a third network device, and the device includes: an acquisition module, used to acquire calculation parameters that meet preset requirements; a first processing module, used to generate an authentication public key based on the calculation parameters; a first processing module, used to generate a partial private key corresponding to each second network device based on the calculation parameters and the authentication public key; wherein, there is at least one second network device; the first processing module, used to generate an authentication parameter corresponding to each second network device based on the partial private key corresponding to each second network device; a first sending module, used to send the authentication public key to the ADB device; a second sending module, used to send the authentication public key and the authentication parameter corresponding to each second network device to the first device; a third sending module, used to send the partial private key, the authentication public key and the authentication parameter corresponding to each second network device to the corresponding second network device.
[0035] According to the twelfth aspect of an embodiment of the present disclosure, an ADB device interaction system is provided, the system comprising: a first device; configured to execute the method as described in the first aspect; a first network device: configured to execute the method as described in the second aspect; a second network device; configured to execute the method as described in the third aspect; an ADB device; configured to execute the method as described in the fourth aspect; a third network device; configured to execute the method as described in the fifth aspect.
[0036] According to the thirteenth aspect of an embodiment of the present disclosure, an electronic device is provided, comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the method as described in the first aspect above, or so that the at least one processor can execute the method as described in the second aspect above, so that the at least one processor can execute the method as described in the third aspect above, so that the at least one processor can execute the method as described in the fourth aspect above, so that the at least one processor can execute the method as described in the fifth aspect above.
[0037] According to the fourteenth aspect of the embodiments of the present disclosure, a non-transitory computer-readable storage medium storing computer instructions is provided, wherein the computer instructions are used to cause the computer to execute the method as described in the first aspect above, or the computer instructions are used to cause the computer to execute the method as described in the second aspect above, or the computer instructions are used to cause the computer to execute the method as described in the third aspect above, or the computer instructions are used to cause the computer to execute the method as described in the fourth aspect above, or the computer instructions are used to cause the computer to execute the method as described in the fifth aspect above.
[0038] According to the fifteenth aspect of the embodiments of the present disclosure, the present disclosure provides a computer program product, including a computer program, wherein the computer program, when executed by a processor, implements the steps of the method described in the first aspect, or, when executed by a processor, implements the steps of the method described in the second aspect, or, when executed by a processor, implements the steps of the method described in the third aspect, or, when executed by a processor, implements the steps of the method described in the fourth aspect, or, when executed by a processor, implements the steps of the method described in the fifth aspect.
[0039] The technical solution provided by the embodiment of the present disclosure may include the following beneficial effects: the first device may send the identity authentication data of the object to be interacted to each second network device, so that each second network device performs identity authentication on the object to be interacted based on the identity authentication data and the first identity identification data sent by the first network device, and returns the identity authentication data to the first device after the authentication is passed, so that the first device sends signature data to the ADB device based on the identity authentication data, so that the ADB device can determine whether to interact with the object to be interacted through the first device based on the signature data. The security system of identity authentication can be improved through distributed encryption and multi-end verification methods, thereby ensuring the security of ADB devices.
[0040] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS
[0041] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the invention and, together with the description, serve to explain the principles of the invention.
[0042] Figure 1 The present invention is a flowchart of an ADB device interaction method according to an exemplary embodiment.
[0043] Figure 2 The figure is a flow chart of another ADB device interaction method according to an exemplary embodiment.
[0044] Figure 3 The figure is a flowchart of another ADB device interaction method according to an exemplary embodiment.
[0045] Figure 4 The figure is a flowchart of another ADB device interaction method according to an exemplary embodiment.
[0046] Figure 5 The figure is a flowchart of another ADB device interaction method according to an exemplary embodiment.
[0047] Figure 6 The figure is a flowchart of another ADB device interaction method according to an exemplary embodiment.
[0048] Figure 7 The figure is a flowchart of another ADB device interaction method according to an exemplary embodiment.
[0049] Figure 8 The figure is a flowchart of another ADB device interaction method according to an exemplary embodiment.
[0050] Fig. 9The figure is a flowchart of another ADB device interaction method according to an exemplary embodiment.
[0051] Fig.10 The figure is a flowchart of another ADB device interaction method according to an exemplary embodiment.
[0052] Fig.11 The figure is a schematic diagram showing an ADB device interaction process according to an exemplary embodiment.
[0053] Fig.12 The figure is a schematic diagram showing an ADB device interaction apparatus according to an exemplary embodiment.
[0054] Fig.13 The figure is a schematic diagram showing another ADB device interaction apparatus according to an exemplary embodiment.
[0055] Fig.14 It is a schematic diagram showing another ADB device interaction apparatus according to an exemplary embodiment.
[0056] Fig.15 It is a schematic diagram showing another ADB device interaction apparatus according to an exemplary embodiment.
[0057] Fig.16 It is a schematic diagram showing another ADB device interaction apparatus according to an exemplary embodiment.
[0058] Fig.17 It is a schematic diagram showing another ADB device interaction apparatus according to an exemplary embodiment.
[0059] Fig.18 It is a schematic diagram showing another ADB device interaction apparatus according to an exemplary embodiment.
[0060] Fig.19 It is a schematic diagram showing another ADB device interaction apparatus according to an exemplary embodiment.
[0061] Fig. 20 The invention is a block diagram of an electronic device for ADB device interaction according to an exemplary embodiment. DETAILED DESCRIPTION
[0062] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present invention. Instead, they are merely examples of devices and methods consistent with some aspects of the present invention as detailed in the appended claims.
[0063] The various numerical numbers such as first and second involved in the present disclosure are only for the convenience of description and are not used to limit the scope of the embodiments of the present disclosure, nor do they indicate the order of precedence.
[0064] Figure 1 1 is a flow chart of an ADB (Android Debug Bridge) device interaction method according to an exemplary embodiment. The method is applied to a first device, which may be an ADB Host. Figure 1 As shown, the method may include but is not limited to the following steps.
[0065] Step S101: Acquire the identity authentication data of the object to be interacted with.
[0066] Specifically, the first device obtains identity authentication data representing the identity of the object to be interacted with.
[0067] Step S102: Send the identity authentication data to the second network device.
[0068] Among them, in the embodiment of the present disclosure, there is at least one second network device, and the identity authentication data is used by each second network device to determine whether the object to be interacted has the ADB device interaction permission in combination with the data sent by the first network device. The identity authentication data is also used by each second network device to determine that the object to be interacted has the ADB device interaction permission, and then generate permission authentication data in combination with the pre-acquired partial key, the pre-acquired authentication public key and the pre-acquired authentication parameters.
[0069] Specifically, the first device sends the identity authentication data of the object to be interacted with to each second network device. Each second network device can determine whether the object to be interacted with has the ADB device interaction permission based on the identity authentication data, and after determining that the object to be interacted with has the ADB device interaction permission, generate and return corresponding data to the first device based on the identity authentication data, the pre-acquired partial key and the pre-acquired authentication public key.
[0070] Step S103: Acquire the authority authentication data returned by the second network device.
[0071] Specifically, the first device obtains the authority authentication data corresponding to the object to be interacted with returned by the second network device.
[0072] Step S104: Generate signature data based on the authority authentication data and the identity authentication data.
[0073] Specifically, the authority authentication data returned by different second network devices are merged and processed, and signature data is generated based on the processed data combined with the identity authentication data.
[0074] Step S105: Send the signature data to the ADB device.
[0075] Specifically, the first device sends the generated signature data to the ADB device, so that the ADB device can determine whether to interact with the ADB device based on the signature data.
[0076] It should be noted that, in some embodiments of the present disclosure, the ADB Host may be a virtual host, and the ADB Host may be set in a terminal device, and the object to be interacted with may interact with the ADB device through the terminal device after passing the authentication.
[0077] By implementing the disclosed embodiment, the first device can send the identity authentication data of the object to be interacted with to the second network device, so that each second network device can authenticate the object to be interacted with, and obtain the identity authentication data returned by the second network device, so as to send signature data to the ADB device based on the identity authentication data, so that the ADB device can determine whether to interact with the object to be interacted with through the first device based on the signature data. The security of identity authentication can be improved through distributed encryption and multi-terminal verification methods, thereby ensuring the security of ADB devices.
[0078] In some embodiments, the first device may merge the permission authentication data returned by different second network devices, and generate signature data based on the merged data and the identity authentication data. As an example, see Figure 2 , Figure 2 FIG. 1 is a flow chart of another ADB device interaction method according to an exemplary embodiment. The method is applied to a first device. Figure 2 As shown, the method may include but is not limited to the following steps.
[0079] Step S201: Acquire the identity authentication data of the object to be interacted with.
[0080] In the embodiments of the present disclosure, step S201 may be implemented in any manner in the embodiments of the present disclosure, and the embodiments of the present disclosure do not limit this and will not be described in detail.
[0081] Step S202: Send the identity authentication data to the second network device.
[0082] In the embodiments of the present disclosure, step S202 may be implemented in any manner in the embodiments of the present disclosure, and the embodiments of the present disclosure do not limit this and will not be described in detail.
[0083] Step S203: Acquire the authority authentication data returned by the second network device.
[0084] In the embodiments of the present disclosure, step S203 may be implemented in any manner in the embodiments of the present disclosure, and the embodiments of the present disclosure do not limit this and will not be described in detail.
[0085] Step S204: Determine whether the amount of authority authentication data is greater than or equal to a preset amount threshold.
[0086] In the embodiments of the present disclosure, step S204 may be implemented in any manner in the embodiments of the present disclosure, and the embodiments of the present disclosure do not limit this and will not be described in detail.
[0087] Step S205: In response to the number of the authority authentication data being greater than or equal to the number threshold, each authority authentication data is verified based on the identity authentication data.
[0088] Specifically, in response to the number of obtained authority authentication data being greater than or equal to the quantity threshold, the first device verifies each authority authentication data based on the identity authentication data sent to the second network device to determine whether each authority authentication data is data generated by the second network device based on the identity authentication data.
[0089] It is understandable that the result of each second network device determining whether the object to be interacted has the ADB device interaction permission may be different. The second network device will return the permission authentication data to the first device only after determining that the object to be interacted has the ADB device interaction permission.
[0090] In an optional implementation, the identity authentication data includes a first string, which is generated by the ADB device and sent to the first device. Verifying each permission authentication data based on the identity authentication data may include but is not limited to the following steps:
[0091] A1: Obtain a first calculation parameter based on a first character string and a preset first calculation method.
[0092] For example, the first device may obtain the first calculation parameter based on the first character string by the following calculation method.
[0093] x = sha256 (token)
[0094] Among them, x is the first calculation parameter, and token is the first string.
[0095] A2: Based on the first calculation parameter, the pre-acquired authentication parameter corresponding to each second network device and the authority authentication data corresponding to each second network device, obtain the second calculation parameter corresponding to each second network device according to the preset second calculation method.
[0096] The authority authentication data includes a first authority authentication parameter, a second authority authentication parameter and a third authority authentication parameter.
[0097] For example, the first device may obtain the second calculation parameter corresponding to each second network device through the following calculation method based on the first calculation parameter, the pre-acquired authentication parameter corresponding to each second network device, and the authority authentication data corresponding to each second network device.
[0098]
[0099] Among them, c i ′ is the second calculation parameter, v and v i is the authentication parameter, x is the first calculation parameter, l is the pre-agreed parameter, x i 、z i and c i The first authority authentication parameter, the second authority authentication parameter and the third authority authentication parameter are included in the authority authentication data.
[0100] In some embodiments of the present disclosure, l is the total number of second network devices.
[0101] A3: Based on the second calculation parameter and the authority authentication data corresponding to each second network device, determine whether the authority authentication data corresponding to each second network device passes the verification.
[0102] For example, determine whether the first authority authentication parameter, the second authority authentication parameter and the third authority authentication parameter included in the authority authentication data include the same parameter as the second parameter. If the authority authentication data includes the same parameter as the second parameter, it is determined that the authority authentication data passes the verification; if the authority authentication data includes the same parameter as the second parameter, it is determined that the authority authentication data passes the verification.
[0103] Step S206: Determine the second network device corresponding to the verified authority authentication data as the target second network device.
[0104] Specifically, the first device determines the second network device corresponding to the verified authority authentication data as the target second network device.
[0105] Step S207: Aggregate the authority authentication data corresponding to the target second network device to obtain signature data.
[0106] In an optional implementation, data aggregation is performed on the authority authentication data corresponding to the target second network device to obtain signature data, which may include but is not limited to the following steps:
[0107] B1: Obtain identification information of the target second network device.
[0108] In some embodiments, each second network device may be numbered and the number of each second network device may be used as identification information. For example, if there are five second network devices, the identification information of the second network devices may be represented as 1, 2, 3, 4 and 5.
[0109] For example, the identification information of the second network device may be represented as 1, 2, 3, 4, and 5, and the identification information of the target second network device may be 1, 2, and 5.
[0110] B1: Based on the first calculation parameter, the identification information and the first character string, a signature value is obtained according to a preset third calculation method.
[0111] For example, the signature value may be obtained by calculation based on the first calculation parameter, the identification information and the first character string according to the following calculation method.
[0112]
[0113] in, Then, the extended Euclidean algorithm is used to calculate a and b, so that a and b satisfy 4a(l!) 2 +eb=1, the final calculation is y=ω a x b . Where y is the signature value.
[0114] B2: Encapsulate the signature value to obtain the signature data.
[0115] Step S208: Send the signature data to the ADB device.
[0116] In the embodiments of the present disclosure, step S208 may be implemented in any manner in the embodiments of the present disclosure, and the embodiments of the present disclosure do not limit this and will not be described in detail.
[0117] By implementing the embodiments of the present disclosure, the first device can verify the obtained authority authentication data based on the identity authentication data to ensure that the authority authentication data is data corresponding to the object to be interacted with, thereby avoiding erroneous authorization. And based on the verified authority authentication data, signature data is generated and sent to the ADB device, so that the ADB device determines whether to interact with the ADB device through the first device based on the signature data.
[0118] In some embodiments, the above-mentioned identity authentication data includes identity identification data corresponding to the object to be interacted with, and the identity identification data is used by the second network device to determine whether the object to be interacted with has ADB device interaction authority. The above-mentioned method also includes: providing the identity identification data corresponding to the object to be interacted with to the first network device.
[0119] In some embodiments, the first identity data may be a temid (temp Identity document, temporary code).
[0120] The above-mentioned embodiments of the present disclosure have introduced the ADB device interaction method provided by the embodiments of the present disclosure from the perspective of the first device. Next, the ADB device interaction method provided by the embodiments of the present disclosure will be further introduced from the perspective of the first network device.
[0121] See also Figure 3 , Figure 3 FIG. 1 is a flowchart of another ADB device interaction method according to an exemplary embodiment. The method is applied to a first network device. Figure 3 As shown, the method may include but is not limited to the following steps.
[0122] Step S301: authenticating the object to be interacted with and obtaining identity identification data corresponding to the object to be interacted with.
[0123] Specifically, the first network device authenticates the identity of the object to be interacted with to determine whether the object to be interacted with has the right to interact with the ADB device, and obtains the identity identification data corresponding to the object to be interacted with.
[0124] In some embodiments, the above-mentioned identity authentication of the object to be interacted with and obtaining the identity identification data corresponding to the object to be interacted with may include: providing an interaction interface through a first device, and obtaining the identity identification data provided by the first device based on the interaction interface; wherein the interaction interface is used to authenticate the object to be interacted with.
[0125] For example, the first network device provides an interactive interface through the browser of the terminal where the first device is located, and the object to be interacted can enter corresponding information through the interactive interface for identity authentication. The first device can generate an identity identification data and append the identity identification data to the end of the URL (Uniform Resource Locator) corresponding to the interactive interface, so that the first network device can obtain the identity identification data corresponding to the object to be interacted.
[0126] In some embodiments, the above-mentioned identity identification data may be temid.
[0127] Step S302: In response to the to-be-interacted object passing identity authentication, the second identity identification data is sent to the second network device.
[0128] Among them, there is at least one second network device.
[0129] Specifically, in response to the to-be-interacted object passing identity authentication, the first network device sends identity authentication data to each second network device.
[0130] By implementing the disclosed embodiment, the first network device can authenticate the object to be interacted with through the first interaction interface, and after the authentication is passed, send the identity identification data corresponding to the object to be interacted with to the second network device, so that the second network device can determine whether the object to be interacted with has the ADB device interaction permission based on the identity identification data sent by the first network device, so as to ensure the security of the ADB device.
[0131] The above-mentioned embodiments of the present disclosure have introduced the ADB device interaction method provided by the embodiments of the present disclosure from the perspective of the first device and the first network device. Next, the ADB device interaction method provided by the embodiments of the present disclosure will be further introduced from the perspective of the second network device.
[0132] See also Figure 4 , Figure 4 FIG. 1 is a flow chart of another ADB device interaction method according to an exemplary embodiment. The method can be applied to a second network device. Figure 4 As shown, the method may include but is not limited to the following steps:
[0133] Step S401: Acquire identity authentication data of a to-be-interacted object sent by a first device and first identity identification data sent by a first network device.
[0134] Step S402: determining whether the object to be interacted with has the interaction authority of the ADB device based on the identity authentication data and the first identity identification data.
[0135] Specifically, the second network device determines whether the object to be interacted corresponding to the identity authentication data is the same as the object to be interacted corresponding to the second identity identification data based on the identity authentication data and the second identity identification data, so as to determine whether the object to be interacted has the interaction authority of the ADB device.
[0136] Step S403: Determine whether the object to be interacted with has the interaction authority of the ADB device, and generate authority authentication data based on the pre-acquired partial private key, the pre-acquired authentication public key, the pre-acquired authentication parameters and the identity authentication data.
[0137] The above-mentioned partial private key, authentication public key and authentication parameter are pre-generated by the third network device and sent to the second network device, and each second network device corresponds to a different partial private key and authentication parameter.
[0138] Specifically, in response to determining that the object to be interacted with has ADB device interaction authority, the second network device generates authority authentication data based on a pre-acquired partial private key, a pre-acquired authentication public key, and a pre-acquired authentication parameter according to a preset calculation method.
[0139] Step S404: Send the authority authentication data to the first device.
[0140] The above-mentioned authority authentication data is used by the first device to generate signature data.
[0141] For example, the second network device encapsulates the authority authentication data into JSON data and sends the JSON data to the first device.
[0142] By implementing the disclosed embodiment, each second network device can independently authenticate the interaction rights of the interaction object based on the identity authentication data sent by the first device, and generate the rights authentication data after the authentication is passed, and send the rights authentication data to the first device. So that the first device sends the signature data to the ADB device based on the first device. The security of identity authentication can be improved through distributed identity authentication, thereby ensuring the security of the ADB device.
[0143] In some embodiments, the authority authentication data may be generated using a preset calculation method based on the identity authentication data, the pre-acquired authentication public key, and the pre-acquired authentication private key. As an example, see Figure 5 , Figure 5 FIG. 1 is a flowchart of another ADB device interaction method according to an exemplary embodiment. As shown in the figure, the method may include but is not limited to the following steps:
[0144] Step S501: Acquire identity authentication data of a to-be-interacted object sent by a first device and first identity identification data sent by a first network device.
[0145] In the embodiments of the present disclosure, step S501 may be implemented in any manner in the embodiments of the present disclosure, and the embodiments of the present disclosure do not limit this and will not be described in detail.
[0146] Step S502: Determine whether the object to be interacted with has interaction authority based on the identity authentication data and the second identity identification data.
[0147] In the embodiments of the present disclosure, step S502 may be implemented in any manner in the embodiments of the present disclosure, and the embodiments of the present disclosure do not limit this and will not be described in detail.
[0148] Step S503: Determine whether the object to be interacted with has the interaction authority of the ADB device, and obtain a first calculation parameter according to a preset first calculation method based on the first character string.
[0149] For example, the second network device may adopt the following calculation method to obtain the first calculation parameter based on the first character string.
[0150] x = sha256 (token)
[0151] Among them, x is the first parameter and token is the first string.
[0152] Step S504: Based on the first calculation parameter and the partial private key, obtain the first authority authentication parameter according to the preset second calculation method.
[0153] For example, the second network device may adopt the following calculation method to calculate the first authority authentication parameter based on the first calculation parameter and a part of the private key.
[0154]
[0155] Among them, x i is the first authority authentication parameter, s i is a partial private key, and l is a preset parameter. In some embodiments, l can be the total number of second network devices.
[0156] Step S505: Determine the parameter range based on the authentication public key.
[0157] For example, if the authentication public key is (n, e), the parameter range can be {0, 1, ..., 2 len(n)+512 -1}.
[0158] Step S506: Acquire a third calculation parameter from the parameter range.
[0159] For example, a number is randomly obtained from the parameter range as the third calculation parameter.
[0160] Step S507: Based on the first calculation parameter, the second calculation parameter and the authentication parameter, obtain a second authority authentication parameter according to a preset second calculation method.
[0161] The above authentication parameters are pre-generated by the third network device and sent to the second network device.
[0162] For example, the second authority authentication parameter may be calculated and obtained based on the first calculation parameter, the second calculation parameter, and the authentication parameter according to the following calculation method.
[0163] v′=v ri
[0164] x′=x 4ril!
[0165]
[0166] Among them, v and v i is the authentication parameter, x is the first calculation parameter, r i is the third calculation parameter, x i is the first permission authentication parameter, c i It is the second authority authentication parameter.
[0167] Step S508: Based on the partial private key, the second calculation parameter and the second authority authentication parameter, a third authority authentication parameter is obtained according to a preset second calculation method.
[0168] For example, the third authority authentication parameter may be calculated and obtained based on the partial private key, the second calculation parameter, and the second authority authentication parameter according to the following calculation method.
[0169] z i =s i c i +r i
[0170] Among them, z i is the third authority authentication parameter, s i is a partial private key, c i is the second authority authentication parameter, r i is the third calculation parameter.
[0171] Step S509: Send the authority authentication data to the first device.
[0172] In the embodiments of the present disclosure, step S509 may be implemented in any manner in the embodiments of the present disclosure, and the embodiments of the present disclosure do not limit this and will not be described in detail.
[0173] In some embodiments, the identity authentication data includes first identity identification data, and the second network device can determine whether the object to be interacted with has ADB device interaction permission based on the first identity identification data and the first identity identification data sent by the first network device. As an example, see Figure 6 , Figure 6 FIG. 1 is a flowchart of another ADB device interaction method according to an exemplary embodiment. Figure 6 As shown, the method may include but is not limited to the following steps.
[0174] Step S601: Acquire identity authentication data of a to-be-interacted object sent by a first device and first identity identification data sent by a first network device.
[0175] In the embodiments of the present disclosure, step S601 may be implemented in any manner in the embodiments of the present disclosure, and the embodiments of the present disclosure do not limit this and will not be described in detail.
[0176] Step S602: Compare the first identity identification data and the second identity identification data.
[0177] Step S603: In response to the first identity identification data being the same as the second identity identification data, it is determined that the object to be interacted with has the interaction authority of the ADB device.
[0178] Specifically, in response to the first identity data being identical to the second identity data, the second network device determines that the object to be interacted with has the interaction authority of the ADB device.
[0179] In some embodiments, the first identity identification data may be a first term, and the second identity identification data may be a second term.
[0180] Step S604: Generate authority authentication data based on the pre-acquired partial private key, the pre-acquired authentication public key and the identity authentication data.
[0181] Wherein, the partial private key, the authentication public key and the authentication parameter are pre-generated by the third network device and sent to the second network device, and each second network device corresponds to a different partial private key and authentication parameter;
[0182] Step S605: Send the authority authentication data to the first device.
[0183] In the embodiment of the present disclosure, step S605 can be implemented by any of the methods in the embodiments of the present disclosure, and the embodiments of the present disclosure are not limited to this and will not be repeated.
[0184] By implementing the embodiment of the present disclosure, the second network device can determine whether the object to be interacted has the interaction authority of the ADB device based on the first identity identification data sent by the first device and the first identity identification data sent by the first network device, so as to perform a subsequent authentication process after determining that the object to be interacted has the interaction authority of the ADB device. Thus, the security of authentication is improved by cross-authentication of different devices, thereby ensuring the security of the ADB device.
[0185] The above-mentioned embodiments of the present disclosure have introduced the ADB device interaction method provided by the embodiments of the present disclosure from the perspective of the first device, the first network device, and the second network device. Next, the ADB device interaction method provided by the embodiments of the present disclosure will be further introduced from the perspective of the ADB device.
[0186] See also Figure 7 , Figure 7 FIG. 1 is a flowchart of another ADB device interaction method according to an exemplary embodiment. The method can be applied to an ADB device. Figure 7 As shown, the method may include but is not limited to the following steps.
[0187] Step S701: Obtain signature data sent by the first device.
[0188] Step S702: Verify the signature data based on the pre-acquired authentication public key.
[0189] The authentication public key is pre-generated by the third network device and sent to the ADB device.
[0190] Specifically, the ADB device verifies the signature data sent by the second network device based on the pre-acquired signature public key to determine whether the signature data is generated by the first device based on the data generated based on the partial private key returned by the second network device.
[0191] Step S703: Determine that the signature verification is successful, and interact with the object to be interacted with through the first device.
[0192] Specifically, the ADB device determines that the signature verification is successful, and interacts with the object to be interacted with through the first device.
[0193] By implementing the embodiments of the present disclosure, the ADB device can verify the signature data based on the pre-acquired authentication public key to determine that the data used to generate the signature data is obtained based on a partial private key, thereby improving the security of the authentication and further ensuring the security of the ADB device.
[0194] In some embodiments, the ADB device may verify the signature data in conjunction with pre-generated data. As an example, see Figure 8 , Figure 8 FIG. 1 is a flowchart of another ADB device interaction method according to an exemplary embodiment. The method can be applied to an ADB device. Figure 8 As shown, the method may include but is not limited to the following steps.
[0195] Step S801: Obtain signature data sent by the first device.
[0196] In the embodiments of the present disclosure, step S801 can be implemented by any of the methods in the embodiments of the present disclosure, and the embodiments of the present disclosure are not limited to this and will not be described in detail.
[0197] Step S802: Based on the pre-generated first character string, a first calculation parameter is obtained according to a preset first calculation method.
[0198] For example, the ADB device may calculate and obtain the first calculation parameter based on the first character string according to the following calculation method.
[0199] x = sha256 (token)
[0200] Among them, x is the first calculation parameter, and token is the first string.
[0201] Step S803: Based on the authentication public key and the signature data, obtain a second calculation parameter according to a preset second calculation method.
[0202] In terms of distance, the ADB device can calculate and obtain the second calculation parameter based on the authentication public key and the signature data according to the following calculation method.
[0203] m=y e modn
[0204] Wherein, m is the second calculation parameter, e and n are authentication public keys, and mod is the modulus operator.
[0205] Step S804: Perform signature verification based on the first calculation parameter and the second calculation parameter.
[0206] For example, the ADB device determines whether the first calculation parameter and the second calculation parameter are equal. If the first calculation parameter and the second calculation parameter are equal, it is determined that the signature verification is successful; if the first calculation parameter and the second calculation parameter are not equal, it is determined that the signature verification fails.
[0207] Step S805: Determine that the signature verification is successful, and interact with the object to be interacted with through the first device.
[0208] In some embodiments, the method further includes: sending the first character string to the first device.
[0209] In some embodiments, the method further includes: determining that the interaction with the object to be interacted with is ended, generating a new first character string; and sending the new first character string to the first device.
[0210] Specifically, after determining that the interaction with the current interactive object is completed, the ADB device generates a new first character string and sends the new first character string to the first device to avoid security reduction caused by data reuse.
[0211] By implementing the embodiment of the present disclosure, the ADB device can verify the signature data sent by the first network device based on the pre-acquired public key to ensure the correctness of the signature data, thereby ensuring the security of the ADB device.
[0212] The above-mentioned embodiments of the present disclosure have introduced the ADB device interaction method provided by the embodiments of the present disclosure from the perspective of the first device, the first network device, the second network device and the ADB device. Next, the ADB device interaction method provided by the embodiments of the present disclosure will be further introduced from the perspective of the third network device.
[0213] See also Fig. 9 , Fig. 9FIG. 1 is a flowchart of another ADB device interaction method according to an exemplary embodiment. Fig. 9 As shown, the method may include but is not limited to the following steps.
[0214] Step S901: Obtain calculation parameters that meet preset requirements.
[0215] For example, the third network device randomly generates two 2048-bit secure prime numbers p and q, such that p and q satisfy and is also a prime number, and obtains the preset parameter l, and obtains k based on l, so that k satisfies
[0216] In some embodiments, l may be the total number of first network devices.
[0217] Step S902: Generate an authentication public key based on the calculation parameters.
[0218] Specifically, the third network device calculates n=pq, and randomly generates a prime number e>l, and uses (n, e) as the authentication public key.
[0219] Step S903: Generate a partial private key corresponding to each second network device based on the calculation parameter and the authentication public key.
[0220] Among them, there is at least one second network device.
[0221] Specifically, the third network device calculates the authentication public key (n, e) where e is The multiplicative inverse element in, that is, de≡1modm, and let a0=d, for each second network device, randomly generate a i ∈Z m , let the polynomial For each second network device, calculate the partial private key s i =f(i)modm.
[0222] Step S904: Generate authentication parameters corresponding to each second network device based on the partial private key and the authentication public key corresponding to each second network device.
[0223] Specifically, the third network device randomly generates Calculate v_pre 2 modn, if Continue to generate Until Let v = v_pre 2 modn, calculation Then the authentication parameters corresponding to each second network device can be expressed as (v, v i )where n is a parameter in the authentication public key (n, e).
[0224] Step S905: Send the authentication public key to the ADB device.
[0225] Step S906: Send the authentication public key and the authentication parameters corresponding to each second network device to the first device.
[0226] Step S907: Send the partial private key, authentication public key and authentication parameters corresponding to each second network device to the corresponding second network device.
[0227] By implementing the embodiment of the present disclosure, the third network device generates an authentication public key based on the calculation parameters that meet the preset requirements, and generates a partial private key and authentication parameters corresponding to each second network device based on the authentication public key and the calculation parameters, so as to send the authentication public key and the authentication parameters corresponding to each second network device to the first device, and send the partial private key, the authentication public key and the authentication parameters corresponding to each second network device to the corresponding second network device. Thus, the first device, the first network device, the second network device and the ADB device can perform multi-terminal authentication based on the received data. The security of the ADB device can be ensured.
[0228] The above-mentioned embodiments of the present disclosure have introduced the ADB device interaction method provided by the embodiments of the present disclosure from the perspectives of the first device, the first network device, the second network device, the ADB device and the third network device. Next, the ADB device interaction method provided by the embodiments of the present disclosure will be further introduced from the perspective of interaction between devices.
[0229] See also Fig.10 , Fig.10 FIG. 1 is a flowchart of another ADB device interaction method according to an exemplary embodiment. Fig.10 As shown, the interaction process may include the following steps.
[0230] Step S1001: The third network device generates an authentication public key, a partial private key corresponding to each second network device, and an authentication parameter corresponding to each second network device.
[0231] Specifically, the third network device generates an authentication public key, a partial private key corresponding to each second network device, and an authentication parameter corresponding to each second network device using any one of the methods in the embodiments of the present disclosure.
[0232] Among them, there is at least one second network device.
[0233] Step S1002: The third network device sends the authentication public key and authentication parameters to the first device, and sends the partial private key, authentication public key and authentication parameters corresponding to each second network device to the corresponding second network device, and sends the authentication public key to the ADB device.
[0234] Specifically, the third network device sends the authentication public key generated in the above steps and the authentication parameters corresponding to each second network device to the first device, and sends the partial private key and authentication parameters corresponding to each second network device generated in the above steps to the corresponding second network device, and sends the authentication public key to the ADB device.
[0235] Step S1003: The first device obtains the identity authentication data of the object to be interacted with, and sends the identity authentication data to the second network device.
[0236] Specifically, when the object to be interacted needs to interact with the ADB device through the first device, the first device obtains the identity authentication data of the object to be interacted with, and sends the identity authentication data to the second network device.
[0237] Step S1004: the first network device verifies the identity of the object to be interacted with, and obtains identity identification data corresponding to the object to be interacted with.
[0238] Specifically, when the object to be interacted needs to interact with the ADB device, the first network device verifies the identity of the object to be interacted with, and obtains identity identification data corresponding to the object to be interacted with.
[0239] Step S1005: The first network device determines that the object to be interacted with has passed the identity authentication, and sends the identity identification data to the second network device.
[0240] Step S1006: The second network device determines whether the object to be interacted has the interaction permission of the ADB device based on the identity authentication data and the identity identification data, and after determining that the object to be interacted has the interaction permission of the ADB device, generates permission authentication data based on the partial private key, the authentication public key, the authentication parameters and the identity authentication data.
[0241] Specifically, the second network device, based on the identity authentication data and the identity identification data, uses the steps in any embodiment of the present application to determine whether the object to be interacted has the interaction permission of the ADB device, and after determining that the object to be interacted has the interaction permission of the ADB device, generates permission authentication data based on a partial private key, an authentication public key, authentication parameters and the identity authentication data, using any method in the various embodiments of the present disclosure.
[0242] Step S1007: The second network device sends the authority authentication data to the first device.
[0243] Step S1008: The first device generates signature data based on the authority authentication data and the identity authentication data, and sends the signature data to the ADC device.
[0244] Specifically, the first device processes the authority authentication data and the identity authentication data in any of the ways in the embodiments of the present disclosure to obtain signature data, and sends the signature data to the ADB device.
[0245] Step S1009: the ADB device verifies the signature data based on the authentication public key, and interacts with the object to be interacted with through the first device after determining that the verification is successful.
[0246] Specifically, the ADB device verifies the signature data based on the authentication public key using any of the methods in the various embodiments of the present disclosure, and interacts with the object to be interacted with through the first device after determining that the verification is successful.
[0247] By implementing the embodiment of the present application, the third network device can generate multiple data and send each data to the corresponding device, and the first device can send the identity authentication data of the object to be interacted to each second network device, so that each second network device can authenticate the object to be interacted based on the identity authentication data and the first identity identification data sent by the first network device, and return the identity authentication data to the first device after the authentication is passed, so that the first device can send signature data to the ADB device based on the identity authentication data, so that the ADB device can determine whether to interact with the object to be interacted through the first device based on the signature data. The security system of identity authentication can be improved through distributed encryption and multi-end verification methods, thereby ensuring the security of ADB devices.
[0248] See also Fig.11 , Fig.11 FIG. 1 is a schematic diagram showing an ADB device interaction process according to an exemplary embodiment. Fig.11 As shown, the key generation center (i.e., the aforementioned third network device) can generate a partial private key corresponding to each signature server (i.e., the aforementioned second network device), and send the partial private key to the corresponding signature server. When the user needs to interact with the ADB device through the ADB tool (i.e., the aforementioned first device), the identity authentication server (i.e., the aforementioned first network device) first authenticates the user's identity, and after the authentication is passed, sends the user's corresponding identity identification data to each signature server, and the ADB device will send the user's corresponding identity authentication data to each signature server. Therefore, each identity authentication server can determine whether the user has the interaction permission of the ADB device based on the acquired data, and return the permission authentication information to the ADB tool after determining the interaction permission of the user's ADB device; thereby, the ADB tool can send signature data to the Android device based on the permission authentication information; after verifying the signature data, the Android device can interact with the user through the ADB tool.
[0249] See also Fig.12 , Fig.121 is a schematic diagram of an ADB device interaction device according to an exemplary embodiment. The device 1200 is applied to a first device, and the device 1200 includes: a first acquisition module 1201, used to acquire identity authentication data of an object to be interacted with; a first sending module 1202, used to send the identity authentication data to a second network device; a second acquisition module 1203, used to acquire authority authentication data returned by the second network device; a first processing module 1204, used to generate signature data based on the authority authentication data and the identity authentication data; a second sending module 1205, used to send the signature data to the ADB device.
[0250] In one implementation, the first processing module 1204 is specifically used to: determine whether the number of authority authentication data is greater than or equal to a preset quantity threshold; in response to the number of authority authentication data being greater than or equal to the quantity threshold, verify each authority authentication data based on the identity authentication data; determine the second network device corresponding to the authority authentication data that passes the verification as the target second network device; perform data aggregation on the authority authentication data corresponding to the target second network device to obtain signature data.
[0251] In an optional implementation, the identity authentication data includes a first string, which is generated by an ADB device and sent to the first device. The first processing module 1204 is specifically used to: obtain a first calculation parameter based on the first string and a preset first calculation device; based on the first calculation parameter, the pre-acquired authentication parameter corresponding to each second network device and the authority authentication data corresponding to each second network device, obtain a second calculation parameter corresponding to each second network device according to a preset second calculation device; wherein the authentication parameter is pre-generated by a third network device and sent to each second network device; based on the second calculation parameter and the authority authentication data corresponding to each second network device, determine whether the authority authentication data corresponding to each second network device passes the verification; wherein the authority authentication data includes a first authority authentication parameter, a second authority authentication parameter and a third authority authentication parameter.
[0252] Optionally, the first processing module 1204 is specifically used to: obtain identification information of the target second network device; based on the first calculation parameter, the identification information and the first character string, obtain a signature value according to a preset third calculation device; encapsulate the signature value to obtain signature data.
[0253] In one implementation, the identity authentication data includes identity identification data corresponding to the object to be interacted with, and the identity identification data is used by the second network device to determine whether the object to be interacted with has the ADB device interaction permission. The above-mentioned apparatus also includes: As an example, the second processing module, see Fig.13 , Fig.13 FIG. 1 is a schematic diagram of another ADB device interaction apparatus according to an exemplary embodiment. Fig.13 As shown, the apparatus 1300 further includes: a second processing module 1305, configured to provide the identity data to the first network device. Fig.13 Modules 1301 to 1304 in Fig.12 Modules 1201 to 1205 in the embodiment have the same structure and function.
[0254] Through the apparatus of the embodiment of the present disclosure, the first device can send the identity authentication data of the object to be interacted to the second network device, so that each second network device can authenticate the object to be interacted, and obtain the identity authentication data returned by the second network device, so as to send signature data to the ADB device based on the identity authentication data, so that the ADB device can determine whether to interact with the object to be interacted through the first device based on the signature data. The security system of identity authentication can be improved through distributed encryption and multi-terminal verification methods, thereby ensuring the security of ADB devices.
[0255] See also Fig.14 , Fig.14 1400 is a schematic diagram of another ADB device interaction device according to an exemplary embodiment. The device 1400 is applied to a first network device, and the device 1400 includes: a processing module 1401, which is used to authenticate the identity of the object to be interacted with and obtain the identity identification data corresponding to the object to be interacted with; a sending module 1402, which is used to send the identity identification data to the second network device in response to the object to be interacted with passing the identity authentication.
[0256] In one implementation, the processing module 1401 is specifically used to: provide an interactive interface through the first device, and obtain identity identification data provided by the first device based on the interactive interface: wherein the interactive interface is used to perform identity authentication on the interactive object.
[0257] Through the apparatus of the embodiment of the present disclosure, the first network device can authenticate the object to be interacted with through the first interaction interface, and after the authentication is passed, send the identity identification information corresponding to the object to be interacted with to the second network device, so that the second network device can determine whether the object to be interacted with has the ADB device interaction permission based on the identity identification information sent by the first network device, so as to ensure the security of the ADB device.
[0258] See also Fig.15 , Fig.15 1500 is a schematic diagram of another ADB device interaction apparatus according to an exemplary embodiment. The apparatus 1500 is applied to a second network device, and the second network device is at least one. Fig.15As shown, the device 1500 includes: an acquisition module 1501, which is used to acquire the identity authentication data of the object to be interacted with sent by the first device and the first identity identification data sent by the first network device; a first processing module 1502, which is used to determine whether the object to be interacted with has the interaction authority of the ADB device based on the identity authentication data and the first identity identification data; a second processing module 1503, which is used to determine whether the object to be interacted with has the interaction authority of the ADB device, and generate authority authentication data based on a pre-acquired partial private key, a pre-acquired authentication public key, a pre-acquired authentication parameter and the identity authentication data; wherein the partial private key, the authentication public key and the authentication parameter are pre-generated by the third network device and sent to the second network device, and each second network device corresponds to a different partial private key and authentication parameter; a sending module 1504, which is used to send the authority authentication data to the first device.
[0259] In one implementation, the authority authentication data includes a first authority authentication parameter, a second authority authentication parameter and a third authority authentication parameter, the identity authentication data includes a first character string, the first character string is generated by the ADB device and sent to the first device, and the second processing module 1503 is specifically used to: based on the first character string, obtain a first calculation parameter according to a preset first calculation device; based on the first calculation parameter and a partial private key, obtain a first authority authentication parameter according to a preset second calculation device; determine a parameter range based on the authentication public key; obtain a second calculation parameter from the parameter range; based on the first calculation parameter, the second calculation parameter and the authentication parameter, obtain a second authority authentication parameter according to a preset second calculation device; based on the partial private key, the second calculation parameter and the second authority authentication parameter, obtain a third authority authentication parameter according to a preset second calculation device.
[0260] In one implementation, the identity authentication data includes second identity identification data corresponding to the object to be interacted with, and the first processing module 1502 is specifically used to: compare the first identity identification data and the second identity identification data; in response to the first identity identification data and the second identity identification data being the same, determine that the object to be interacted with has the interaction permission of the ADB device.
[0261] Through the apparatus of the embodiment of the present disclosure, the second network device can independently authenticate the interaction rights of the interaction object based on the identity authentication data sent by the first device, and generate the rights authentication data after the authentication is passed, and send the rights authentication data to the first device. So that the first device sends the signature data to the ADB device based on the first device. The security of identity authentication can be improved through distributed identity authentication, thereby ensuring the security of the ADB device.
[0262] See also Fig.16 , Fig.16FIG. 16 is a schematic diagram of another ADB device interaction apparatus according to an exemplary embodiment. The apparatus 1600 is applied to an ADB device. Fig.16 As shown, the device 1600 includes: a first acquisition module 1601, used to obtain the signature data sent by the first device; a first processing module 1602, used to verify the signature data based on a pre-acquired authentication public key; wherein the authentication public key is pre-generated by the ADB device and sent to the ADB device; a second processing module 1603, used to determine whether the signature verification is successful, and interact with the object to be interacted with through the first device.
[0263] In one implementation, the first processing module 1602 is specifically used to: based on a pre-generated first character string, obtain a first calculation parameter according to a preset first calculation device; based on the authentication public key and signature data, obtain a second calculation parameter according to a preset second calculation device; and verify the signature based on the first calculation parameter and the second calculation parameter.
[0264] In an optional implementation, the above device further includes: a first sending module. As an example, see Fig.17 , Fig.17 FIG. 1700 is a schematic diagram of another ADB device interaction apparatus according to an exemplary embodiment. The apparatus 1700 is applied to an ADB device. Fig.17 As shown, the apparatus 1700 further includes: a first sending module 1704, configured to send the first character string to the first device. Fig.17 Modules 1701 to 1703 in Fig.16 Modules 1601 to 1603 in the embodiment have the same structure and function.
[0265] In an optional implementation, the above device further includes: a third processing module and a second sending module. As an example, see Fig.18 , Fig.18 FIG. 180 is a schematic diagram of another ADB device interaction apparatus according to an exemplary embodiment. The apparatus 1800 is applied to an ADB device. Fig.18 As shown, the apparatus 1800 further includes: a third processing module 1805, configured to determine that the interaction with the object to be interacted with is ended, and generate a new first string; and a second sending module 1806, configured to send the new first string to the first device. Fig.18 Modules 1801 to 1804 in Fig.17 Modules 1701 to 1704 in the embodiment have the same structure and function.
[0266] Through the apparatus of the embodiment of the present disclosure, the ADB device can verify the signature data based on the pre-acquired authentication public key to determine that the data used to generate the signature data is obtained based on a partial private key, thereby improving the security of the authentication and further ensuring the security of the ADB device.
[0267] See also Fig.19 , Fig.19 FIG. 19 is a schematic diagram of another ADB device interaction apparatus according to an exemplary embodiment. The apparatus 1900 is applied to a third network device. Fig.19 As shown, the device 1900 includes: an acquisition module 1901, used to acquire calculation parameters that meet preset requirements; a first processing module 1902, used to generate an authentication public key based on the calculation parameters; a second processing module 1903, used to generate a partial private key corresponding to each second network device based on the calculation parameters and the authentication public key; wherein there is at least one second network device; a third processing module 1904, used to generate an authentication parameter corresponding to each second network device based on the partial private key corresponding to each second network device; a first sending module 1905 is used to send the authentication public key to the ADB device; a second sending module 1906 is used to send the authentication public key and the authentication parameter corresponding to each second network device to the first device; a third sending module 1907 is used to send the partial private key, the authentication public key and the authentication parameter corresponding to each second network device to the corresponding second network device.
[0268] Through the apparatus of the embodiment of the present disclosure, the third network device can generate an authentication public key based on the calculation parameters that meet the preset requirements, and generate a partial private key and authentication parameters corresponding to each second network device based on the authentication public key and the calculation parameters, so as to send the authentication public key and the authentication parameters corresponding to each second network device to the first device, and send the key fragment and the authentication parameters corresponding to each second network device to the corresponding second network device. Thus, the first device, the first network device, the second network device and the ADB device can perform multi-terminal authentication based on the received data. The security of the ADB device can be ensured.
[0269] Regarding the device in the above embodiment, the specific manner in which each module performs operations has been described in detail in the embodiment of the method, and will not be elaborated here.
[0270] The present disclosure also provides an ADB device interaction system, the system comprising the aforementioned Fig.12 The first device described in the embodiment, Fig.14 The first network device described in the embodiment, Fig.15 The second network device described in the embodiment, Figure 16 to Figure 18 The ADB device described in any one of the embodiments, Fig.19The third network device described in the embodiment.
[0271] Fig. 20 The electronic device 2000 may be any one of a first device, a first network device, a second network device, a third network device and an ADB device.
[0272] Reference Fig. 20 , the electronic device 2000 may include one or more of the following components: a processing component 2002 , a memory 2004 , a power component 2006 , a multimedia component 2008 , an input / output (I / O) interface 2010 , and a communication component 2014 .
[0273] The processing component 2002 generally controls the overall operation of the electronic device 2000, such as operations associated with display, data communication, and recording operations. The processing component 2002 may include one or more processors 2020 to execute instructions to complete all or part of the steps of the above-mentioned method. In addition, the processing component 2002 may include one or more modules to facilitate the interaction between the processing component 2002 and other components. For example, the processing component 2002 may include a multimedia module to facilitate the interaction between the multimedia component 2008 and the processing component 2002.
[0274] The memory 2004 is configured to store various types of data to support operations on the device 2000. Examples of such data include instructions for any application or method operating on the electronic device 2000, contact data, phone book data, messages, pictures, videos, etc. The memory 2004 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk.
[0275] The power component 2006 provides power to various components of the electronic device 2000. The power component 2006 may include a power management system, one or more power supplies, and other components associated with generating, managing, and distributing power to the electronic device 2000.
[0276] The multimedia component 2008 includes a screen that provides an output interface between the electronic device 2000 and the user. In some embodiments, the screen may include a liquid crystal display (LCD) and a touch panel (TP). If the screen includes a touch panel, the screen may be implemented as a touch screen to receive input signals from the user. The touch panel includes one or more touch sensors to sense touch, slide, and gestures on the touch panel. The touch sensor may not only sense the boundaries of a touch or slide action, but also detect the duration and pressure associated with the touch or slide operation.
[0277] The input / output interface 2010 provides an interface between the processing component 2002 and a peripheral interface module, which may be a keyboard, a click wheel, a button, etc.
[0278] The communication component 2014 is configured to facilitate wired or wireless communication between the electronic device 2000 and other devices. The electronic device 2000 can access a wireless network based on a communication standard, such as WiFi, 2G or 3G, or a combination thereof. In an exemplary embodiment, the communication component 2014 receives a broadcast signal or broadcast-related information from an external broadcast management system via a broadcast channel. In an exemplary embodiment, the communication component 2014 also includes a near field communication (NFC) module to facilitate short-range communication. For example, the NFC module can be implemented based on radio frequency identification (RFID) technology, infrared data association (IrDA) technology, ultra-wideband (UWB) technology, Bluetooth (BT) technology and other technologies.
[0279] In an exemplary embodiment, the electronic device 2000 may be implemented by one or more application-specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable gate arrays (FPGAs), controllers, microcontrollers, microprocessors or other electronic components to perform the above methods.
[0280] In an exemplary embodiment, a non-transitory computer-readable storage medium including instructions is also provided, such as a memory 2004 including instructions, and the instructions can be executed by the processor 2020 of the electronic device 2000 to complete the above method. For example, the non-transitory computer-readable storage medium can be a ROM, a random access memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, etc.
[0281] The present disclosure also provides a computer program product, which implements the functions of any of the above method embodiments when executed by a computer.
[0282] Those skilled in the art will readily appreciate other embodiments of the present invention after considering the specification and practicing the invention disclosed herein. The present disclosure is intended to cover any variations, uses or adaptations of the present invention that follow the general principles of the present invention and include common knowledge or customary techniques in the art that are not disclosed in the present disclosure. The description and examples are to be considered exemplary only, and the true scope and spirit of the present invention are indicated by the following claims.
[0283] It should be understood that the present invention is not limited to the exact construction that has been described above and shown in the drawings and that various modifications and changes may be made without departing from the scope thereof. The scope of the present invention is limited only by the appended claims.
Claims
1. An Android Debug Bridge ADB device interaction method, characterized in that: The method is applied to a first device, and the method includes: Obtain the identity authentication data of the object to be interacted with; Send the identity authentication data to a second network device; wherein, there is at least one second network device, and the identity authentication data is used by each second network device to determine whether the object to be interacted has the ADB device interaction permission in combination with the data sent by the first network device, and the identity authentication data is also used by each second network device to generate permission authentication data in combination with a pre-acquired partial key, a pre-acquired authentication public key, and a pre-acquired authentication parameter after determining that the object to be interacted has the ADB device interaction permission; Obtaining the authority authentication data returned by the second network device; Generate signature data based on the authority authentication data and the identity authentication data; The signed data is sent to the ADB device.
2. The method according to claim 1, characterized in that The generating of signature data based on the authority authentication data and the identity authentication data comprises: Determining whether the amount of the authority authentication data is greater than or equal to a preset amount threshold; In response to the number of the authority authentication data being greater than or equal to the number threshold, verifying each of the authority authentication data based on the identity authentication data; Determine the second network device corresponding to the verified authority authentication data as the target second network device; Data aggregation is performed on the authority authentication data corresponding to the target second network device to obtain the signature data.
3. The method according to claim 2, characterized in that The identity authentication data includes a first character string, which is generated by the ADB device and sent to the first device, and the verifying each of the authority authentication data based on the identity authentication data includes: Acquire a first calculation parameter based on the first character string and a preset first calculation method; Based on the first calculation parameter, the pre-acquired authentication parameter corresponding to each of the second network devices and the authority authentication data corresponding to each of the second network devices, obtain the second calculation parameter corresponding to each of the second network devices according to a preset second calculation method; wherein the authentication parameter is pre-generated by a third network device and sent to the first device; Based on the second calculation parameter and the authority authentication data corresponding to each of the second network devices, determine whether the authority authentication data corresponding to each of the second network devices passes the verification; wherein the authority authentication data includes a first authority authentication parameter, a second authority authentication parameter and a third authority authentication parameter.
4. The method according to claim 3, characterized in that The step of aggregating the authority authentication data corresponding to the target second network device to obtain the signature data includes: Acquire identification information of the target second network device; Based on the first calculation parameter, the identification information and the first character string, obtaining a signature value according to a preset third calculation method; The signature value is encapsulated to obtain the signature data.
5. The method according to any one of claims 1 to 4, characterized in that: The identity authentication data includes identity identification data corresponding to the object to be interacted with, and the identity identification data is used by the second network device to determine whether the object to be interacted with has ADB device interaction authority. The method also includes: The identity data is provided to the first network device.
6. An Android Debug Bridge (ADB) device interaction method, the method being applied to a first network device, the method comprising: Performing identity authentication on the object to be interacted with, and obtaining identity identification data corresponding to the object to be interacted with; In response to the to-be-interacted object passing identity authentication, the identity identification data is sent to the second network device.
7. The method according to claim 6, characterized in that The step of authenticating the object to be interacted with and obtaining identity identification data corresponding to the object to be interacted with includes: An interactive interface is provided by a first device, and the identity identification data provided by the first device is obtained based on the interactive interface: wherein the interactive interface is used to perform identity authentication on the object to be interacted with.
8. An Android Debug Bridge ADB device interaction method, characterized in that: The method is applied to a second network device, where there is at least one second network device, and the method includes: Acquire identity authentication data of the object to be interacted with sent by the first device and first identity identification data sent by the first network device; Determining whether the object to be interacted with has the interaction authority of the ADB device based on the identity authentication data and the first identity identification data; Determine that the object to be interacted with has the interaction authority of the ADB device, and generate authority authentication data based on a pre-acquired partial private key, a pre-acquired authentication public key, a pre-acquired authentication parameter, and the identity authentication data; wherein the partial private key, the authentication public key, and the authentication parameter are pre-generated by a third network device and sent to the second network device, and each second network device corresponds to a different partial private key and the authentication parameter; The authority authentication data is sent to the first device.
9. The method according to claim 8, characterized in that The authority authentication data includes a first authority authentication parameter, a second authority authentication parameter, and a third authority authentication parameter, the identity authentication data includes a first string, the first string is generated by an ADB device and sent to the first device, and the authority authentication data is generated based on a pre-acquired partial private key, a pre-acquired authentication public key, a pre-acquired authentication parameter, and the identity authentication data, including: Based on the first character string, obtaining a first calculation parameter according to a preset first calculation method; Based on the first calculation parameter and the partial private key, obtaining the first authority authentication parameter according to a preset second calculation method; Determining a parameter range based on the authentication public key; Obtaining a second calculation parameter from the parameter range; Based on the first calculation parameter, the second calculation parameter and the authentication parameter, obtaining the second authority authentication parameter according to a preset second calculation method; Based on the partial private key, the second calculation parameter and the second authority authentication parameter, the third authority authentication parameter is obtained according to a preset second calculation method.
10. The method according to claim 8, characterized in that The identity authentication data includes second identity identification data corresponding to the object to be interacted with, and determining whether the object to be interacted with has the interaction permission of the ADB device based on the identity authentication data and the first identity identification data includes: Comparing the first identity identification data with the second identity identification data; In response to the first identity identification data being the same as the second identity identification data, it is determined that the object to be interacted with has the interaction permission of the ADB device.
11. An Android Debug Bridge ADB device interaction method, characterized in that: The method is applied to an ADB device, and the method includes: Obtaining signature data sent by the first device; Verifying the signature data based on a pre-acquired authentication public key; wherein the authentication public key is pre-generated by a third network device and sent to the ADB device; Determine that the signature verification is successful, and interact with the object to be interacted with through the first device.
12. The method according to claim 11, characterized in that The verifying the signature data based on the pre-acquired authentication public key includes: Based on the pre-generated first character string, obtaining a first calculation parameter according to a preset first calculation method; Based on the authentication public key and the signature data, obtaining a second calculation parameter according to a preset second calculation method; The signature is verified based on the first calculation parameter and the second calculation parameter.
13. The method according to claim 12, characterized in that The method further comprises: The first character string is sent to the first device.
14. The method according to claim 12 or 13, characterized in that The method further comprises: Determining that the interaction with the to-be-interacted object is completed, and generating a new first character string; The new first character string is sent to the first device.
15. An Android Debug Bridge ADB device interaction method, characterized in that: The method is applied to a third network device, and the method includes: Obtain calculation parameters that meet preset requirements; Generate an authentication public key based on the calculation parameters; Based on the calculation parameter and the authentication public key, generate a partial private key corresponding to each second network device; wherein the number of the second network device is at least one; Generate authentication parameters corresponding to each of the second network devices based on the partial private key corresponding to each of the second network devices; Sending the authentication public key to the ADB device; Sending the authentication public key and the authentication parameters corresponding to each second network device to the first device; The partial private key, the authentication public key and the authentication parameter corresponding to each second network device are sent to the corresponding second network device.
16. An interaction method of an ADB device, characterized in that: include: The third network device generates an authentication public key, a partial private key corresponding to each second network device, and an authentication parameter corresponding to each second network device; wherein the second network device is at least one; The third network device sends the authentication public key and the authentication parameter to the first device, and sends the partial private key, the authentication public key and the authentication parameter corresponding to each of the second network devices to the corresponding second network device, and sends the authentication public key to the ADB device; The first device obtains identity authentication data of the object to be interacted with, and sends the identity authentication data to the second network device; The first network device verifies the identity of the object to be interacted with, and obtains identity identification data corresponding to the object to be interacted with; In response to the to-be-interacted object passing identity authentication, the first network device sends the identity identification data to the second network device; The second network device determines whether the object to be interacted has the interaction authority of the ADB device based on the identity authentication data and the identity identification data, and after determining that the object to be interacted has the interaction authority of the ADB device, generates authority authentication data based on the partial private key, the authentication public key, the authentication parameter and the identity authentication data; The second network device sends the authority authentication data to the first device; The first device generates signature data based on the authority authentication data and the identity authentication data, and sends the signature data to the ADB device; The ADB device verifies the signature data based on the authentication public key, and interacts with the object to be interacted with through the first device after determining that the verification is successful.
17. An Android Debug Bridge ADB device interaction device, characterized in that: The device is applied to a first device, and includes: A first acquisition module, used to acquire identity authentication data of a subject to be interacted with; A first sending module, configured to send the identity authentication data to a second network device; there is at least one second network device, and the identity authentication data is used by each of the second network devices to determine whether the object to be interacted has the ADB device interaction permission in combination with the data sent by the first network device. The identity authentication data is also used by each of the second network devices to generate permission authentication data in combination with a pre-acquired partial key, a pre-acquired authentication public key, and a pre-acquired authentication parameter after determining that the object to be interacted has the ADB device interaction permission. A second acquisition module, used to acquire the authority authentication data returned by the second network device; A processing module, used to generate signature data based on the authority authentication data and the identity authentication data; The second sending module is used to send the signature data to the ADB device.
18. An Android Debug Bridge (ADB) device interaction device, the device is applied to a first network device, the device comprising: A processing module, used to perform identity authentication on the object to be interacted with and obtain identity identification data corresponding to the object to be interacted with; The sending module is used for sending the identity identification data to the second network device in response to the object to be interacted with passing the identity authentication.
19. An Android Debug Bridge ADB device interaction device, characterized in that: The apparatus is applied to a second network device, the second network device is at least one, and the apparatus includes: An acquisition module, used to acquire identity authentication data of the object to be interacted with sent by the first device and first identity identification data sent by the first network device; A first processing module, configured to determine whether the to-be-interacted object has the interaction authority of the ADB device based on the identity authentication data and the first identity identification data; A second processing module is used to determine whether the object to be interacted with has the interaction authority of the ADB device, and to generate authority authentication data based on a pre-acquired partial private key, a pre-acquired authentication public key, a pre-acquired authentication parameter, and the identity authentication data; wherein the partial private key, the authentication public key, and the authentication parameter are pre-generated by a third network device and sent to the second network device, and each second network device corresponds to a different partial private key and the authentication parameter; A sending module is used to send the authority authentication data to the first device.
20. An Android Debug Bridge ADB device interaction device, characterized in that: The device is applied to an ADB device, and the device includes: A first acquisition module, used to acquire signature data sent by the first device; A first processing module, configured to verify the signature data based on a pre-acquired authentication public key; wherein the authentication public key is pre-generated by a third network device and sent to the ADB device; The second processing module is used to determine that the signature verification is successful and interact with the object to be interacted with through the first device.
21. An Android debug bridge ADB device interaction device, characterized in that: The device is applied to a third network device, and the device includes: An acquisition module is used to obtain calculation parameters that meet preset requirements; A first processing module, configured to generate an authentication public key based on the calculation parameters; A first processing module, configured to generate a partial private key corresponding to each second network device based on the calculation parameter and the authentication public key; wherein the number of the second network device is at least one; A first processing module, configured to generate an authentication parameter corresponding to each second network device based on a partial private key corresponding to each second network device; A first sending module, used to send the authentication public key to an ADB device; A second sending module, used to send the authentication public key and the authentication parameter corresponding to each second network device to the first device; The third sending module is used to send the partial private key, the authentication public key and the authentication parameter corresponding to each second network device to the corresponding second network device.
22. An interactive system for an Android debug bridge ADB device, characterized in that: include: First device; is configured to perform the method according to any one of claims 1 to 5; First network device: configured to execute the method according to claim 6 or 7; A second network device; configured to execute the method as claimed in any one of claims 8 to 10; ADB device; configured to perform the method as claimed in any one of claims 11 to 14; A third network device; configured to execute the method as claimed in claim 15.
23. An electronic device, characterized in that: The device comprises: at least one processor; and a memory communicatively connected to the at least one processor; wherein, The memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the method as claimed in any one of claims 1 to 5, or so that the at least one processor can execute the method as claimed in any one of claims 6 or 7, or so that the at least one processor can execute the method as claimed in any one of claims 8 to 10, or so that the at least one processor can execute the method as claimed in any one of claims 11 to 14, or so that the at least one processor can execute the method as claimed in claim 15.
24. A non-transitory computer-readable storage medium storing computer instructions, characterized in that: The computer instructions are used to cause the computer to execute the method as claimed in any one of claims 1 to 5, or the computer instructions are used to cause the computer to execute the method as claimed in claim 6 or 7, or the computer instructions are used to cause the computer to execute the method as claimed in any one of claims 8 to 10, or the computer instructions are used to cause the computer to execute the method as claimed in any one of claims 11 to 14, or the computer instructions are used to cause the computer to execute the method as claimed in claim 15.