Dual security authentication method and device and electronic equipment

Abstract

The invention relates to a dual security authentication method and device and electronic equipment, and belongs to the technical field of computers, and the method comprises the steps: receiving a user login request sent by terminal equipment, and obtaining an encrypted ciphertext from the user login request; performing a first decryption operation on the encrypted ciphertext to obtain encrypted equipment information and an encrypted PIN code; performing key generation operation on the encryption equipment information to generate a first decryption key, and performing second decryption operation on the encryption PIN code based on the first decryption key to obtain a first PIN code of the cloud certificate; performing third decryption operation on the encrypted equipment information to obtain first equipment information of the terminal equipment; according to the first PIN code and the first equipment information, login security authentication is carried out on the terminal equipment, and the login process is executed in response to the security authentication, the dual login security authentication is carried out on the terminal equipment through the PIN code and the equipment information, and the security and the reliability in the login security authentication process of the terminal equipment are ensured.

Description

Technical Field

[0001] The present disclosure relates to the field of computer technology, and in particular to a dual security authentication method, device and electronic device. Background Art

[0002] In the related technology, during the security authentication process, the cloud certificate personal identification number (PIN) is often relied upon alone. When the PIN code is set simply, it is vulnerable to brute force attacks. When the PIN code is set complexly, it will increase the user's memory burden. After the PIN code is leaked, security authentication can be achieved only through the PIN code. Therefore, how to improve the reliability and security of security authentication has become a problem that needs to be solved urgently. Summary of the invention

[0003] The present disclosure provides a dual security authentication method, device, electronic device, computer-readable storage medium and computer program product to at least solve the problem of low security and reliability in the security authentication process in the related art.

[0004] The technical solution of the present disclosure is as follows:

[0005] According to a first aspect of an embodiment of the present disclosure, a dual security authentication method is provided, including: receiving a user login request sent by a terminal device, and obtaining an encrypted ciphertext from the user login request; performing a first decryption operation on the encrypted ciphertext to obtain encrypted device information and an encrypted PIN code; performing a key generation operation on the encrypted device information to generate a first decryption key, and performing a second decryption operation on the encrypted PIN code based on the first decryption key to obtain a first PIN code of a cloud certificate; performing a third decryption operation on the encrypted device information to obtain first device information of the terminal device; performing a login security authentication on the terminal device according to the first PIN code and the first device information, and executing a login process in response to the security authentication being passed.

[0006] According to the second aspect of an embodiment of the present disclosure, a dual security authentication method is provided, including: obtaining first device information of a terminal device and a first PIN code of a cloud certificate; performing a first encryption operation on the first device information to obtain encrypted device information; based on the encrypted device information, performing a second encryption operation on the first PIN code of the cloud certificate to obtain an encrypted PIN code; performing a third encryption operation on the encrypted device information and the encrypted PIN code to generate an encrypted ciphertext; generating a user login request based on the encrypted ciphertext, and sending the user login request to a server.

[0007] According to a third aspect of an embodiment of the present disclosure, a dual security authentication device is provided, the device comprising: a receiving module, used to receive a user login request sent by a terminal device, and obtain an encrypted ciphertext from the user login request; a first decryption module, used to perform a first decryption operation on the encrypted ciphertext to obtain encrypted device information and an encrypted PIN code; a second decryption module, used to perform a key generation operation on the encrypted device information to generate a first decryption key, and perform a second decryption operation on the encrypted PIN code based on the first decryption key to obtain a first PIN code of a cloud certificate; a third decryption module, used to perform a third decryption operation on the encrypted device information to obtain first device information of the terminal device; an authentication module, used to perform login security authentication on the terminal device according to the first PIN code and the first device information, and execute a login process in response to the security authentication being passed.

[0008] According to the fourth aspect of an embodiment of the present disclosure, a dual security authentication device is provided, which includes: an acquisition module for acquiring first device information of a terminal device and a first PIN code of a cloud certificate; a first encryption module for performing a first encryption operation on the first device information to obtain encrypted device information; a second encryption module for performing a second encryption operation on the first PIN code of the cloud certificate based on the encrypted device information to obtain an encrypted PIN code; a third encryption module for performing a third encryption operation on the encrypted device information and the encrypted PIN code to generate an encrypted ciphertext; and a sending module for generating a user login request based on the encrypted ciphertext, and sending the user login request to a server.

[0009] According to a fifth aspect of an embodiment of the present disclosure, an electronic device is provided, comprising: a processor; a memory for storing instructions executable by the processor; wherein the processor is configured to execute the instructions to implement the dual security authentication method described in the first aspect or the second aspect.

[0010] According to a sixth aspect of an embodiment of the present disclosure, a computer-readable storage medium is provided. When instructions in the computer-readable storage medium are executed by a processor of an electronic device, the electronic device is enabled to execute the dual security authentication method described in the first aspect or the second aspect.

[0011] According to a seventh aspect of an embodiment of the present disclosure, a computer program product is provided, comprising a computer program, wherein when the computer program is executed by a processor, the dual security authentication method described in the first aspect or the second aspect is implemented.

[0012] The technical solution provided by the embodiments of the present disclosure brings at least the following beneficial effects: receiving a user login request sent by a terminal device, and obtaining an encrypted ciphertext from the user login request, performing a first decryption operation on the encrypted ciphertext to obtain encrypted device information and an encrypted PIN code, performing a key generation operation on the encrypted device information to generate a first decryption key, and performing a second decryption operation on the encrypted PIN code based on the first decryption key to obtain a first PIN code of a cloud certificate, performing a third decryption operation on the encrypted device information to obtain first device information of the terminal device, performing login security authentication on the terminal device according to the first PIN code and the first device information, and executing the login process in response to the security authentication passing. The present disclosure performs dual login security authentication on the terminal device through the PIN code and device information, thereby ensuring the security and reliability of the terminal device login security authentication process.

[0013] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] The drawings herein are incorporated into and constitute a part of the specification, illustrate embodiments consistent with the present disclosure, and together with the description are used to explain the principles of the present disclosure, and do not constitute improper limitations on the present disclosure.

[0015] Figure 1 It is a flowchart of a dual security authentication method according to the first embodiment of the present disclosure.

[0016] Figure 2 4 is a flowchart of a dual security authentication method according to a second embodiment of the present disclosure.

[0017] Figure 3 4 is a flowchart of a dual security authentication method according to the third embodiment of the present disclosure.

[0018] Figure 4 is a block diagram of a dual security authentication device according to a first embodiment of the present disclosure.

[0019] Figure 5 is a block diagram of a dual security authentication device according to a first embodiment of the present disclosure.

[0020] Figure 6 It is a block diagram of an electronic device according to an exemplary embodiment. DETAILED DESCRIPTION

[0021] In order to enable ordinary persons in the art to better understand the technical solutions of the present disclosure, the technical solutions in the embodiments of the present disclosure will be clearly and completely described below in conjunction with the accompanying drawings.

[0022] It should be noted that the terms "first", "second", etc. in the specification and claims of the present disclosure and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present disclosure described herein can be implemented in an order other than those illustrated or described herein. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present disclosure. Instead, they are merely examples of devices and methods consistent with some aspects of the present disclosure as detailed in the appended claims.

[0023] It should be noted that the information (including but not limited to user device information, user personal information, etc.), data (including but not limited to data used for analysis, stored data, displayed data, etc.) and signals involved in this disclosure are all authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant laws, regulations and standards.

[0024] It should be noted that the acquisition, transmission, storage, use, and processing of data in the technical solution of the present disclosure are in compliance with the relevant provisions of relevant laws and regulations. In the embodiments of the present disclosure, certain software, components, models, and other existing solutions in the industry may be mentioned, and they should be regarded as exemplary. Their purpose is only to illustrate the feasibility of implementing the technical solution of the present disclosure, but it does not mean that the applicant has or will necessarily use the solution.

[0025] Figure 1 It is a flowchart of a dual security authentication method according to the first embodiment of the present disclosure.

[0026] like Figure 1 As shown, the dual security authentication method of the first embodiment of the present disclosure includes the following steps:

[0027] In step S101, a user login request sent by a terminal device is received, and an encrypted ciphertext is obtained from the user login request.

[0028] In the disclosed embodiment, the terminal device generates a user login request based on the encrypted ciphertext, and sends the user login request to the server through the network. Correspondingly, the server receives the user login request sent by the terminal device.

[0029] Optionally, after receiving the user login request, information extraction may be performed on the user login request to obtain encrypted ciphertext from the user login request.

[0030] It should be noted that the terminal device can generate an encrypted ciphertext based on the encrypted device information and the encrypted PIN code by obtaining the encrypted device information and the encrypted PIN code.

[0031] In step S102, a first decryption operation is performed on the encrypted ciphertext to obtain encrypted device information and an encrypted PIN code.

[0032] In the disclosed embodiment, after the encrypted ciphertext is obtained, a first decryption operation may be performed on the encrypted ciphertext to obtain the encrypted device information and the encrypted PIN code.

[0033] Optionally, a target decryption algorithm may be selected, and a first decryption operation may be performed on the encrypted ciphertext using the target decryption algorithm to obtain the encrypted device information and the encrypted PIN code.

[0034] In step S103, a key generation operation is performed on the encrypted device information to generate a first decryption key, and a second decryption operation is performed on the encrypted PIN code based on the first decryption key to obtain a first PIN code of the cloud certificate.

[0035] Optionally, a key generation operation may be performed on the encrypted device information based on an encryption algorithm to generate a first decryption key, and a second decryption operation may be performed on the encrypted PIN code based on the first decryption key to obtain the first PIN code.

[0036] In step S104, a third decryption operation is performed on the encrypted device information to obtain the first device information of the terminal device.

[0037] The first device information of the terminal device refers to the unique identification information of the terminal device.

[0038] For example, the first device information may be an International Mobile Equipment Identity (IMEI for short), or, for another example, the first device information may be a combination of a mobile phone number corresponding to the terminal device and the IMEI.

[0039] It should be noted that the present disclosure does not limit the specific manner of performing the third decryption operation on the encrypted device information to obtain the first device information of the terminal device.

[0040] Optionally, a hash calculation may be performed on the first PIN code to obtain a hash value of the first PIN code, a second decryption key may be generated based on the hash value of the first PIN code, and a third decryption operation may be performed on the encrypted device information based on the second decryption key to obtain the first device information.

[0041] Optionally, a decryption private key may be determined, and a third decryption operation may be performed on the encrypted device information based on the decryption private key to obtain the first device information.

[0042] In step S105, a login security authentication is performed on the terminal device according to the first PIN code and the first device information, and a login process is executed in response to the security authentication being passed.

[0043] In the embodiment of the present disclosure, the PIN code information of the cloud certificate stored in the server can be obtained, the second device information bound to the terminal device when it is registered can be obtained, and a first security verification can be performed on the terminal device based on the first PIN code and the PIN code information. A second security verification can be performed on the terminal device based on the first device information and the second device information. In response to both the first security verification and the second security verification being passed, it is determined that the terminal device has passed the login security verification.

[0044] In an embodiment of the present disclosure, in response to the terminal device failing the first security verification and / or the second security verification, it is determined that the terminal device fails the login security verification.

[0045] Optionally, after determining that the terminal device has failed the login security authentication, the server may send an error prompt message to the terminal device.

[0046] According to the dual security authentication method provided by the embodiment of the present disclosure, a user login request sent by a terminal device is received, and an encrypted ciphertext is obtained from the user login request, a first decryption operation is performed on the encrypted ciphertext to obtain encrypted device information and an encrypted PIN code, a key generation operation is performed on the encrypted device information to generate a first decryption key, and a second decryption operation is performed on the encrypted PIN code based on the first decryption key to obtain a first PIN code of the cloud certificate, a third decryption operation is performed on the encrypted device information to obtain first device information of the terminal device, a login security authentication is performed on the terminal device according to the first PIN code and the first device information, and in response to the security authentication passing the login process, the present disclosure performs a dual login security authentication on the terminal device through the PIN code and the device information, thereby ensuring the security and reliability of the terminal device login security authentication process.

[0047] Figure 2 4 is a flowchart of a dual security authentication method according to a second embodiment of the present disclosure.

[0048] like Figure 2 As shown, the dual security authentication method of the second embodiment of the present disclosure includes the following steps:

[0049] In step S201, a user login request sent by a terminal device is received, and an encrypted ciphertext is obtained from the user login request.

[0050] In step S202, a first decryption operation is performed on the encrypted ciphertext to obtain encrypted device information and an encrypted PIN code.

[0051] The relevant contents of step S201 and step S202 can be found in the above embodiment and will not be described again here.

[0052] In step S203, a key generation operation is performed on the encrypted device information to generate a first decryption key.

[0053] In the embodiment of the present disclosure, after the encryption device information is acquired, a key generation operation may be performed on the encryption device information through an asymmetric encryption algorithm to generate a first decryption key.

[0054] For example, a key generation operation may be performed on the encrypted device information using an RSA algorithm to generate a first decryption key.

[0055] In step S204, a second decryption operation is performed on the encrypted PIN code based on the first decryption key to obtain the first PIN code.

[0056] In the disclosed embodiment, after the first decryption key is obtained, a second decryption operation may be performed on the encrypted PIN code based on the first decryption key to obtain the first PIN code.

[0057] As a possible implementation method, based on the above implementation, the specific process of performing the third decryption operation on the encrypted device information in step S104 to obtain the first device information of the terminal device includes steps S205 to S206:

[0058] In step S205, a hash calculation is performed on the first PIN code to obtain a hash value of the first PIN code.

[0059] In the disclosed embodiment, after the first PIN code is obtained, a hash calculation may be performed on the first PIN code using a secure hash algorithm (Secure Hash Algorithm, SHA for short) to obtain a hash value of the first PIN code.

[0060] For example, a key generation operation may be performed on the encrypted device information using a SHA-256 algorithm to generate a first decryption key.

[0061] In step S206, a second decryption key is generated based on the hash value of the first PIN code, and a third decryption operation is performed on the encrypted device information based on the second decryption key to obtain the first device information.

[0062] In the disclosed embodiment, after the hash value of the first PIN code is obtained, a second decryption key is generated based on the hash value of the first PIN code, and a third decryption operation is performed on the encrypted device information based on the second decryption key to obtain the first device information.

[0063] As a possible implementation method, based on the above implementation, the specific process of performing the third decryption operation on the encrypted device information in step S104 to obtain the first device information of the terminal device includes step S207:

[0064] In step S207, a decryption private key is determined, and a third decryption operation is performed on the encrypted device information based on the decryption private key to obtain the first device information.

[0065] Optionally, a decryption private key may be generated by an asymmetric encryption algorithm and stored in a preset location, and the decryption private key may be called to perform a third decryption operation on the encrypted device information to obtain the first device information.

[0066] As a possible implementation method, based on the above implementation, the specific process of performing login security authentication on the terminal device according to the first PIN code and the first device information in step S105 includes steps S208 to S206:

[0067] In step S208, the PIN code information of the cloud certificate stored in the server is obtained.

[0068] In the embodiment of the present disclosure, after the PIN code information of the cloud certificate is generated, the PIN code information of the cloud certificate may be stored in the server.

[0069] Optionally, the second PIN code of the cloud certificate set during registration can be obtained through the security interface, a random character string of the second PIN code can be generated, and the second PIN code and the random character string can be combined to obtain first combination information, and the first combination information can be hashed to obtain the hash value of the second PIN code as the PIN code information of the cloud certificate.

[0070] In step S209, the second device information bound when the terminal device is registered is obtained.

[0071] For example, the second device information may be the IMEI bound when the terminal device is registered; or another example, the second device information may be a combination of the IMEI bound when the terminal device is registered and the mobile phone number corresponding to the terminal device.

[0072] In step S2010, a first level of security verification is performed on the terminal device based on the first PIN code and PIN code information.

[0073] In the disclosed embodiment, a random string associated with the first PIN code can be retrieved, and the first PIN code and the random string can be combined to obtain second combination information, and a hash calculation is performed on the second combination information to obtain a hash value of the first PIN code, and it is determined whether the hash value of the first PIN code and the hash value of the second PIN code are consistent. In response to the hash value of the first PIN code and the hash value of the second PIN code being consistent, it is determined that the terminal device has passed the first level of security verification.

[0074] In step S2011, a second level of security verification is performed on the terminal device based on the first device information and the second device information.

[0075] In the embodiment of the present disclosure, after obtaining the first device information and the second device information, it can be determined whether the first device information is consistent with the second device information. In response to the first device information and the second device information being consistent, it is determined that the terminal device has passed the second security verification.

[0076] In step S2012, in response to both the first security verification and the second security verification being passed, it is determined that the terminal device passes the login security verification.

[0077] In step S2013, in response to the security authentication being passed, a login process is executed.

[0078] In the embodiments of the present disclosure, in order to ensure the security and reliability of the login process, the abnormal login frequency of the terminal device within a set time period can be recorded. In response to the abnormal login frequency of the terminal device being greater than the set frequency, when the terminal device passes the login security authentication, the user biometric information of the terminal device is obtained, and identity authentication is performed based on the user biometric information. After the identity authentication is passed, the login process is started.

[0079] It should be noted that the present disclosure does not limit abnormal login behavior of terminal devices, for example: a terminal device attempts to log in multiple times in a short period of time; or for example: a terminal device logs in from different geographical locations in a short period of time.

[0080] It should be noted that the present disclosure does not limit the setting of the set duration. For example, the set duration may be 1 day; or for another example, the set duration may be 1 week.

[0081] It should be noted that the present disclosure does not limit the setting of user biometric information, for example: the user biometric information is a fingerprint; for another example: the user biometric information is a face.

[0082] According to the dual security authentication method provided by the embodiment of the present disclosure, a user login request sent by a terminal device is received, and an encrypted ciphertext is obtained from the user login request, a first decryption operation is performed on the encrypted ciphertext to obtain encrypted device information and an encrypted PIN code, a key generation operation is performed on the encrypted device information to generate a first decryption key, a second decryption operation is performed on the encrypted PIN code based on the first decryption key to obtain the first PIN code, a hash calculation is performed on the first PIN code to obtain a hash value of the first PIN code, a second decryption key is generated based on the hash value of the first PIN code, and a third decryption operation is performed on the encrypted device information based on the second decryption key to obtain the first device information, or a decryption private key is determined, and a third decryption operation is performed on the encrypted device information based on the decryption private key. The first device information is obtained, the PIN code information of the cloud certificate stored in the server is obtained, the second device information bound to the terminal device when the terminal device is registered is obtained, and the first security verification is performed on the terminal device according to the first PIN code and the PIN code information. The second security verification is performed on the terminal device according to the first device information and the second device information. In response to both the first security verification and the second security verification being passed, it is determined that the terminal device passes the login security verification, and the login process is executed in response to the security verification being passed. Therefore, the present disclosure performs double login security authentication on the terminal device, effectively preventing unauthorized access and dangerous behaviors, taking into account security and privacy protection while providing convenient services, and ensuring the security and reliability of the terminal device login security authentication process.

[0083] Figure 3 4 is a flowchart of a dual security authentication method according to the third embodiment of the present disclosure.

[0084] like Figure 3 As shown, the dual security authentication method of the third embodiment of the present disclosure includes the following steps:

[0085] In step S301, first device information of a terminal device and a first PIN code of a cloud certificate are obtained.

[0086] In the embodiment of the present disclosure, the unique identification information of the terminal device may be acquired, and the unique identification information of the terminal device may be used as the first device information of the terminal device.

[0087] For example, the first device information may be an IMEI. Another example is that the first device information may be a combination of a mobile phone number corresponding to the terminal device and the IMEI.

[0088] Among them, the first PIN code of the cloud certificate usually refers to the personal identification number (Personal Identification Number, referred to as PIN code), which is used to verify the identity to ensure security. In the mobile cloud certificate solution, the PIN code is used to strengthen the security protection of transactions. By setting the first PIN code of the cloud certificate, the security of the transaction process can be further improved.

[0089] In the embodiment of the present disclosure, after the user completes the cloud certificate registration, a password may be set as the first PIN code of the cloud certificate.

[0090] Furthermore, in order to enhance the security of the PIN code, the PIN code may be changed within a preset time period.

[0091] Optionally, the first PIN code needs to meet preset complexity requirements, for example: the first PIN code needs to include uppercase and lowercase letters and numbers; for another example: the first PIN code needs to include uppercase and lowercase letters, numbers and special characters, etc.

[0092] Optionally, when a user uses the cloud certificate service for the first time, he or she may register using the mobile phone number corresponding to the terminal device. The system sends a one-time verification code (One-Time Password, OTP for short), and the user completes the cloud certificate registration after entering the correct verification code.

[0093] In the disclosed embodiment, the first PIN code may be encrypted by using SHA-256 and adding a salt value, and the encrypted first PIN code may be stored in the server.

[0094] In step S302, a first encryption operation is performed on the first device information to obtain encrypted device information.

[0095] It should be noted that the present disclosure does not limit the specific method of performing the first encryption operation on the first device information to obtain the encrypted device information, and it can be selected according to actual conditions.

[0096] Optionally, a hash calculation may be performed on the first PIN code to obtain a hash value of the first PIN code, a first encryption key may be generated based on the hash value of the first PIN code, and a first encryption operation may be performed on the first device information based on the first encryption key to obtain encrypted device information.

[0097] Optionally, an encryption public key may be determined, and a first encryption operation may be performed on the first device information based on the encryption public key to obtain encrypted device information.

[0098] In step S303, based on the encryption device information, a second encryption operation is performed on the first PIN code of the cloud certificate to obtain an encrypted PIN code.

[0099] It should be noted that after obtaining the encryption device information, in order to improve the encryption strength of the encryption PIN code, the encryption device information can be used as an additional encryption parameter to perform a second encryption operation on the first PIN code of the cloud certificate based on the encryption device information to obtain the encryption PIN code.

[0100] In the disclosed embodiment, after the encryption device information is acquired, a key generation operation may be performed on the encryption device information, and a second encryption operation may be performed on the first PIN code based on a second encryption key to obtain an encrypted PIN code.

[0101] In step S304, a third encryption operation is performed on the encrypted device information and the encrypted PIN code to generate an encrypted ciphertext.

[0102] It should be noted that by performing a third encryption operation on the encrypted device information and the encrypted PIN code, it is ensured that even if a single encryption layer is cracked, sensitive information cannot be directly obtained.

[0103] It should be noted that the present disclosure does not limit the specific method of performing the third encryption operation on the encrypted device information and the encrypted PIN code to generate the encrypted ciphertext, which can be selected according to actual conditions.

[0104] Optionally, a second encryption operation may be performed using the Advanced Encryption Standard (AES) to generate an encrypted ciphertext.

[0105] In step S305, a user login request is generated based on the encrypted ciphertext, and the user login request is sent to the server.

[0106] In the disclosed embodiment, after the encrypted ciphertext is obtained, a login request may be generated based on the encrypted ciphertext, and the user login request may be sent to the server so as to perform a subsequent authentication process through the server.

[0107] Optionally, in order to ensure the security of data transmission and prevent data from being intercepted during transmission, a user login request may be sent to the server via Hypertext Transfer Protocol Secure (HTTPS for short).

[0108] According to the dual security authentication method provided by the embodiment of the present disclosure, by obtaining the first device information of the terminal device and the first PIN code of the cloud certificate, a first encryption operation is performed on the first device information to obtain encrypted device information, based on the encrypted device information, a second encryption operation is performed on the first PIN code of the cloud certificate to obtain an encrypted PIN code, a third encryption operation is performed on the encrypted device information and the encrypted PIN code to generate an encrypted ciphertext, a user login request is generated based on the encrypted ciphertext, and the user login request is sent to the server. Therefore, the present disclosure performs a third encryption operation on the encrypted device information and the encrypted PIN code to generate an encrypted ciphertext, thereby ensuring the security of the encrypted ciphertext and laying a foundation for subsequent security authentication.

[0109] Figure 4 FIG. 4 is a block diagram of a dual security authentication device according to a first embodiment of the present disclosure.

[0110] like Figure 4 As shown, the dual security authentication device 400 of the embodiment of the present disclosure includes: a receiving module 401, a first decryption module 402, a second decryption module 403, a third decryption module 404 and an authentication module 405.

[0111] The receiving module 401 is used to receive a user login request sent by a terminal device and obtain an encrypted ciphertext from the user login request;

[0112] A first decryption module 402, configured to perform a first decryption operation on the encrypted ciphertext to obtain encrypted device information and an encrypted PIN code;

[0113] The second decryption module 403 is used to perform a key generation operation on the encrypted device information to generate a first decryption key, and perform a second decryption operation on the encrypted PIN code based on the first decryption key.

[0114] Decryption operation to obtain the first PIN code of the cloud certificate;

[0115] A third decryption module 404, configured to perform a third decryption operation on the encrypted device information to obtain first device information of the terminal device;

[0116] The authentication module 405 is used to perform login security authentication on the terminal device according to the first PIN code and the first device information, and execute the login process in response to the security authentication passing.

[0117] In one embodiment of the present disclosure, the third decryption module 404 is further used to: perform a hash calculation on the first PIN code to obtain a hash value of the first PIN code; generate a second decryption key based on the hash value of the first PIN code, and perform a third decryption operation on the encrypted device information based on the second decryption key to obtain the first device information.

[0118] In one embodiment of the present disclosure, the third decryption module 404 is further used to: determine a decryption private key, and perform a third decryption operation on the encrypted device information based on the decryption private key to obtain the first device information.

[0119] In one embodiment of the present disclosure, the authentication module 405 is also used to: obtain the PIN code information of the cloud certificate stored in the server; obtain the second device information bound to the terminal device when it is registered; perform a first security verification on the terminal device based on the first PIN code and the PIN code information; perform a second security verification on the terminal device based on the first device information and the second device information; and in response to both the first security verification and the second security verification being passed, determine that the terminal device has passed the login security verification.

[0120] In one embodiment of the present disclosure, the process of generating the PIN code information of the cloud certificate includes: obtaining the second PIN code of the cloud certificate set during registration through a security interface; generating a random string of the second PIN code, and combining the second PIN code and the random string to obtain first combination information; performing a hash calculation on the first combination information to obtain a hash value of the second PIN code as the PIN code information of the cloud certificate.

[0121] In one embodiment of the present disclosure, the authentication module 405 is further used to: retrieve a random string associated with the first PIN code, and combine the first PIN code and the random string to obtain second combination information; perform hash calculation on the second combination information to obtain a hash value of the first PIN code; determine whether the hash value of the first PIN code and the hash value of the second PIN code are consistent; in response to the hash value of the first PIN code and the hash value of the second PIN code being consistent, determine that the terminal device has passed the first security verification.

[0122] In one embodiment of the present disclosure, the device 400 is also used to: record the abnormal login frequency of the terminal device within a set time period, and in response to the abnormal login frequency of the terminal device being greater than the set frequency, obtain the user biometric information of the terminal device when the terminal device passes the login security authentication; perform identity authentication based on the user biometric information, and then start the login process after passing the identity authentication.

[0123] Regarding the device in the above embodiment, the specific manner in which each module performs operations has been described in detail in the embodiment of the method, and will not be elaborated here.

[0124] In summary, the dual security authentication device provided by the embodiment of the present disclosure receives a user login request sent by a terminal device, and obtains an encrypted ciphertext from the user login request, performs a first decryption operation on the encrypted ciphertext to obtain encrypted device information and an encrypted PIN code, performs a key generation operation on the encrypted device information to generate a first decryption key, and performs a second decryption operation on the encrypted PIN code based on the first decryption key to obtain a first PIN code of the cloud certificate, performs a third decryption operation on the encrypted device information to obtain the first device information of the terminal device, performs login security authentication on the terminal device according to the first PIN code and the first device information, and executes the login process in response to the security authentication passing. The present disclosure performs dual login security authentication on the terminal device through the PIN code and device information, thereby ensuring the security and reliability of the terminal device login security authentication process.

[0125] Figure 5 FIG. 4 is a block diagram of a dual security authentication device according to a first embodiment of the present disclosure.

[0126] like Figure 5 As shown, the dual security authentication device 500 of the embodiment of the present disclosure includes: an acquisition module 501, a first encryption module 502, a second encryption module 503, a third encryption module 504 and a sending module 505.

[0127] An acquisition module 501 is used to acquire first device information of a terminal device and a first PIN code of a cloud certificate;

[0128] A first encryption module 502, configured to perform a first encryption operation on the first device information to obtain encrypted device information;

[0129] A second encryption module 503 is used to perform a second encryption operation on the first PIN code of the cloud certificate based on the encryption device information to obtain an encrypted PIN code;

[0130] A third encryption module 504, configured to perform a third encryption operation on the encryption device information and the encryption PIN code to generate an encrypted ciphertext;

[0131] The sending module 505 is used to generate a user login request based on the encrypted ciphertext and send the user login request to the server.

[0132] In one embodiment of the present disclosure, the first encryption module 502 is further used to: perform a hash calculation on the first PIN code to obtain a hash value of the first PIN code; generate a first encryption key based on the hash value of the first PIN code; and perform a first encryption operation on the first device information based on the first encryption key to obtain the encrypted device information.

[0133] In one embodiment of the present disclosure, the first encryption module 502 is further used to: determine an encryption public key, and perform a first encryption operation on the first device information based on the encryption public key to obtain encrypted device information.

[0134] In one embodiment of the present disclosure, the second encryption module 503 is further used to: perform a key generation operation on the encryption device information to generate a second encryption key; and perform a second encryption operation on the first PIN code based on the second encryption key to obtain the encrypted PIN code.

[0135] Regarding the device in the above embodiment, the specific manner in which each module performs operations has been described in detail in the embodiment of the method, and will not be elaborated here.

[0136] In summary, the dual security authentication device provided by the embodiment of the present disclosure obtains the first device information of the terminal device and the first PIN code of the cloud certificate, performs a first encryption operation on the first device information to obtain encrypted device information, performs a second encryption operation on the first PIN code of the cloud certificate based on the encrypted device information to obtain an encrypted PIN code, performs a third encryption operation on the encrypted device information and the encrypted PIN code to generate an encrypted ciphertext, generates a user login request based on the encrypted ciphertext, and sends the user login request to the server. Therefore, the present disclosure performs a third encryption operation on the encrypted device information and the encrypted PIN code to generate an encrypted ciphertext, thereby ensuring the security of the encrypted ciphertext and laying a foundation for subsequent security authentication.

[0137] Figure 6 It is a block diagram of an electronic device according to an exemplary embodiment.

[0138] like Figure 6 As shown, the electronic device 600 includes:

[0139] The memory 610 and the processor 620, a bus 630 connecting different components (including the memory 610 and the processor 620), the memory 610 stores a computer program, and when the processor 620 executes the program, the dual security authentication method described in the first aspect or the second aspect of the present disclosure is implemented.

[0140] Bus 630 represents one or more of several types of bus structures, including a memory bus or memory controller, a peripheral bus, an accelerated graphics port, a processor or a local bus using any of a variety of bus architectures. By way of example, these architectures include, but are not limited to, an Industry Standard Architecture (ISA) bus, a Micro Channel Architecture (MAC) bus, an Enhanced ISA bus, a Video Electronics Standards Association (VESA) local bus, and a Peripheral Component Interconnect (PCI) bus.

[0141] The electronic device 600 typically includes a variety of electronic device readable media. These media can be any available media that can be accessed by the electronic device 600, including volatile and non-volatile media, removable and non-removable media.

[0142] The memory 610 may also include computer system readable media in the form of volatile memory, such as random access memory (RAM) 640 and / or cache memory 650. The electronic device 600 may further include other removable / non-removable, volatile / non-volatile computer system storage media. By way of example only, the storage system 660 may be used to read and write non-removable, non-volatile magnetic media ( Figure 6 not shown, usually called a "hard drive"). Although Figure 6 Not shown, a disk drive for reading and writing to a removable non-volatile disk (e.g., a "floppy disk"), and an optical drive for reading and writing to a removable non-volatile optical disk (e.g., a CD-ROM, DVD-ROM, or other optical medium) may be provided. In these cases, each drive may be connected to bus 630 via one or more data medium interfaces. Memory 610 may include at least one program product having a set (e.g., at least one) of program modules that are configured to perform the functions of the various embodiments of the present disclosure.

[0143] A program / utility 680 having a set (at least one) of program modules 670 may be stored, for example, in the memory 610, such program modules 670 including, but not limited to, an operating system, one or more application programs, other program modules, and program data, each of which or some combination may include an implementation of a network environment. The program modules 670 generally perform the functions and / or methods of the embodiments described in the present disclosure.

[0144] The electronic device 600 may also communicate with one or more external devices 690 (e.g., keyboard, pointing device, display 691, etc.), one or more devices that enable a user to interact with the electronic device 600, and / or any device that enables the electronic device 600 to communicate with one or more other computing devices (e.g., network card, modem, etc.). Such communication may be performed through an input / output (I / O) interface 692. Furthermore, the electronic device 600 may also communicate with one or more networks (e.g., local area network (LAN), wide area network (WAN) and / or public network, such as the Internet) through a network adapter 693. Figure 6As shown, the network adapter 693 communicates with other modules of the electronic device 600 via the bus 630. It should be understood that, although not shown in the figure, other hardware and / or software modules can be used in conjunction with the electronic device 600, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems.

[0145] The processor 620 executes various functional applications and data processing by running the programs stored in the memory 610 .

[0146] It should be noted that the implementation process and technical principles of the electronic device of this embodiment refer to the aforementioned explanation of the dual security authentication method of the embodiment of the present disclosure, and will not be repeated here.

[0147] In summary, the electronic device provided by the embodiment of the present disclosure can execute the double security authentication method as described above, by receiving a user login request sent by the terminal device, and obtaining an encrypted ciphertext from the user login request, performing a first decryption operation on the encrypted ciphertext to obtain encrypted device information and an encrypted PIN code, performing a key generation operation on the encrypted device information to generate a first decryption key, and performing a second decryption operation on the encrypted PIN code based on the first decryption key to obtain the first PIN code of the cloud certificate, performing a third decryption operation on the encrypted device information to obtain the first device information of the terminal device, performing login security authentication on the terminal device according to the first PIN code and the first device information, and executing the login process in response to the security authentication passing. The present disclosure performs double login security authentication on the terminal device through the PIN code and device information, thereby ensuring the security and reliability of the terminal device login security authentication process.

[0148] In order to implement the above embodiments, the present disclosure also proposes a computer-readable storage medium.

[0149] When the instructions in the computer-readable storage medium are executed by the processor of the electronic device, the electronic device can perform the dual security authentication method as described above. Optionally, the computer-readable storage medium can be a ROM, a random access memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, etc.

[0150] In order to implement the above embodiments, the present disclosure further provides a computer program product, including a computer program, characterized in that when the computer program is executed by a processor, the dual security authentication method described in the first aspect or the second aspect is implemented.

[0151] Those skilled in the art will readily appreciate other embodiments of the present disclosure after considering the specification and practicing the invention disclosed herein. The present disclosure is intended to cover any variations, uses or adaptations of the present disclosure that follow the general principles of the present disclosure and include common knowledge or customary techniques in the art that are not disclosed in the present disclosure. The description and examples are to be considered exemplary only, and the true scope and spirit of the present disclosure are indicated by the following claims.

[0152] It should be understood that the present disclosure is not limited to the exact structures that have been described above and shown in the drawings, and that various modifications and changes may be made without departing from the scope thereof. The scope of the present disclosure is limited only by the appended claims.

Claims

1. A dual security authentication method, characterized in that: include: Receiving a user login request sent by a terminal device, and obtaining an encrypted ciphertext from the user login request; Performing a first decryption operation on the encrypted ciphertext to obtain encrypted device information and an encrypted PIN code; Performing a key generation operation on the encrypted device information to generate a first decryption key, and performing a second decryption operation on the encrypted PIN code based on the first decryption key to obtain a first PIN code of the cloud certificate; Performing a third decryption operation on the encrypted device information to obtain first device information of the terminal device; The terminal device is subjected to a login security authentication based on the first PIN code and the first device information, and a login process is executed in response to the security authentication being passed.

2. The method according to claim 1, characterized in that The performing a third decryption operation on the encrypted device information to obtain the first device information of the terminal device includes: Performing a hash calculation on the first PIN code to obtain a hash value of the first PIN code; A second decryption key is generated based on the hash value of the first PIN code, and a third decryption operation is performed on the encrypted device information based on the second decryption key to obtain the first device information.

3. The method according to claim 1, characterized in that The performing a third decryption operation on the encrypted device information to obtain the first device information of the terminal device includes: A decryption private key is determined, and a third decryption operation is performed on the encrypted device information based on the decryption private key to obtain the first device information.

4. The method according to any one of claims 1 to 3, characterized in that The performing login security authentication on the terminal device according to the first PIN code and the first device information includes: Obtaining PIN code information of the cloud certificate stored in the server; Obtaining information of a second device bound when the terminal device is registered; Performing a first security verification on the terminal device according to the first PIN code and PIN code information; Performing a second security verification on the terminal device according to the first device information and the second device information; In response to both the first security verification and the second security verification being passed, it is determined that the terminal device passes the login security verification.

5. The method according to claim 4, characterized in that The process of generating the PIN code information of the cloud certificate includes: Acquiring the second PIN code of the cloud certificate set during registration through a security interface; generating a random string of the second PIN code, and combining the second PIN code and the random string to obtain first combination information; A hash calculation is performed on the first combined information to obtain a hash value of the second PIN code as the PIN code information of the cloud certificate.

6. The method according to claim 5, characterized in that The performing a first security verification on the terminal device according to the first PIN code and the PIN code information includes: Retrieving a random string associated with the first PIN code, and combining the first PIN code and the random string to obtain second combination information; Performing a hash calculation on the second combination information to obtain a hash value of the first PIN code; Determining whether the hash value of the first PIN code is consistent with the hash value of the second PIN code; In response to the hash value of the first PIN code being consistent with the hash value of the second PIN code, it is determined that the terminal device passes the first security verification.

7. The method according to any one of claims 1 to 3, characterized in that The method further comprises: Recording the abnormal login frequency of the terminal device within a set time period, and in response to the abnormal login frequency of the terminal device being greater than the set frequency, obtaining user biometric information of the terminal device when the terminal device passes the login security authentication; Authentication is performed based on the user's biometric information, and the login process is initiated after the identity authentication is passed.

8. A dual security authentication method, characterized in that: include: Obtaining first device information of the terminal device and a first PIN code of the cloud certificate; Performing a first encryption operation on the first device information to obtain encrypted device information; Based on the encryption device information, performing a second encryption operation on the first PIN code of the cloud certificate to obtain an encrypted PIN code; Performing a third encryption operation on the encryption device information and the encryption PIN code to generate an encrypted ciphertext; A user login request is generated based on the encrypted ciphertext, and the user login request is sent to a server.

9. The method according to claim 8, characterized in that The performing a first encryption operation on the first device information to obtain encrypted device information includes: Performing a hash calculation on the first PIN code to obtain a hash value of the first PIN code; generating a first encryption key based on a hash value of the first PIN code; A first encryption operation is performed on the first device information based on the first encryption key to obtain the encrypted device information.

10. The method according to claim 10, characterized in that The performing a first encryption operation on the first device information to obtain encrypted device information includes: An encryption public key is determined, and a first encryption operation is performed on the first device information based on the encryption public key to obtain encrypted device information.

11. The method according to claim 8, characterized in that The performing a second encryption operation on the first PIN code of the cloud certificate based on the encryption device information to obtain an encrypted PIN code includes: Performing a key generation operation on the encryption device information to generate a second encryption key; A second encryption operation is performed on the first PIN code based on the second encryption key to obtain the encrypted PIN code.

12. A dual security authentication device, characterized in that: The device comprises: A receiving module, used to receive a user login request sent by a terminal device, and obtain an encrypted ciphertext from the user login request; A first decryption module, used to perform a first decryption operation on the encrypted ciphertext to obtain encrypted device information and an encrypted PIN code; A second decryption module, configured to perform a key generation operation on the encrypted device information to generate a first decryption key, and perform a second decryption operation on the encrypted PIN code based on the first decryption key to obtain a first PIN code of the cloud certificate; A third decryption module, used to perform a third decryption operation on the encrypted device information to obtain the first device information of the terminal device; An authentication module is used to perform login security authentication on the terminal device according to the first PIN code and the first device information, and execute a login process in response to the security authentication being passed.

13. A dual security authentication device, characterized in that: The device comprises: An acquisition module, used to acquire first device information of a terminal device and a first PIN code of a cloud certificate; A first encryption module, used to perform a first encryption operation on the first device information to obtain encrypted device information; A second encryption module, configured to perform a second encryption operation on the first PIN code of the cloud certificate based on the encryption device information to obtain an encrypted PIN code; A third encryption module, used to perform a third encryption operation on the encryption device information and the encryption PIN code to generate an encrypted ciphertext; The sending module is used to generate a user login request based on the encrypted ciphertext and send the user login request to the server.

14. An electronic device, characterized in that: include: processor; a memory configured to store instructions executable by the processor; The processor is configured to execute the instructions to implement the dual security authentication method as described in any one of claims 1-7 or claims 8-11.

15. A computer-readable storage medium, when the instructions in the computer-readable storage medium are executed by a processor of an electronic device, the electronic device is enabled to execute the dual security authentication method as described in any one of claims 1-7 and claims 8-11.

16. A computer program product comprising a computer program, characterized in that When the computer program is executed by a processor, the dual security authentication method according to any one of claims 1 to 7 and claims 8 to 11 is implemented.

Images