Dual security authentication methods, devices and electronic equipment

Abstract

This disclosure relates to a dual-security authentication method, apparatus, and electronic device, belonging to the field of computer technology. It receives a user login request sent by a terminal device and obtains encrypted ciphertext from the user login request; performs a first decryption operation on the encrypted ciphertext to obtain encrypted device information and an encrypted PIN code; performs a key generation operation on the encrypted device information to generate a first decryption key, and performs a second decryption operation on the encrypted PIN code based on the first decryption key to obtain a first PIN code for a cloud certificate; performs a third decryption operation on the encrypted device information to obtain first device information of the terminal device; and performs login security authentication on the terminal device based on the first PIN code and the first device information. Upon successful security authentication, a login process is executed. This disclosure performs dual login security authentication on the terminal device using the PIN code and device information, ensuring the security and reliability of the terminal device login security authentication process.

Description

Technical Field

[0001] This disclosure relates to the field of computer technology, and in particular to a dual-security authentication method, apparatus, and electronic device. Background Technology

[0002] In related technologies, security authentication often relies solely on cloud certificate personal identification numbers (PINs). When the PIN is set simply, it is vulnerable to brute-force attacks; when the PIN is set complexly, it increases the user's memory burden. Once the PIN is leaked, security authentication can be achieved solely through the PIN. Therefore, how to improve the reliability and security of security authentication has become an urgent problem to be solved. Summary of the Invention

[0003] This disclosure provides a dual security authentication method, apparatus, electronic device, computer-readable storage medium, and computer program product to at least address the problems of low security and low reliability in the security authentication process in related technologies.

[0004] The technical solution disclosed herein is as follows:

[0005] According to a first aspect of the present disclosure, a dual security authentication method is provided, comprising: receiving a user login request sent by a terminal device and obtaining encrypted ciphertext from the user login request; performing a first decryption operation on the encrypted ciphertext to obtain encrypted device information and an encrypted PIN code; performing a key generation operation on the encrypted device information to generate a first decryption key, and performing a second decryption operation on the encrypted PIN code based on the first decryption key to obtain a first PIN code of a cloud certificate; performing a third decryption operation on the encrypted device information to obtain first device information of the terminal device; performing login security authentication on the terminal device based on the first PIN code and the first device information, and executing a login process in response to successful security authentication.

[0006] According to a second aspect of the present disclosure, a dual-security authentication method is provided, comprising: obtaining first device information of a terminal device and a first PIN code of a cloud certificate; performing a first encryption operation on the first device information to obtain encrypted device information; performing a second encryption operation on the first PIN code of the cloud certificate based on the encrypted device information to obtain an encrypted PIN code; performing a third encryption operation on the encrypted device information and the encrypted PIN code to generate encrypted ciphertext; generating a user login request based on the encrypted ciphertext and sending the user login request to a server.

[0007] According to a third aspect of the present disclosure, a dual security authentication device is provided, the device comprising: a receiving module, configured to receive a user login request sent by a terminal device and obtain encrypted ciphertext from the user login request; a first decryption module, configured to perform a first decryption operation on the encrypted ciphertext to obtain encrypted device information and an encrypted PIN code; a second decryption module, configured to perform a key generation operation on the encrypted device information to generate a first decryption key, and perform a second decryption operation on the encrypted PIN code based on the first decryption key to obtain a first PIN code of a cloud certificate; a third decryption module, configured to perform a third decryption operation on the encrypted device information to obtain first device information of the terminal device; and an authentication module, configured to perform login security authentication on the terminal device according to the first PIN code and the first device information, and execute a login process in response to successful security authentication.

[0008] According to a fourth aspect of the present disclosure, a dual security authentication device is provided, the device comprising: an acquisition module, configured to acquire first device information of a terminal device and a first PIN code of a cloud certificate; a first encryption module, configured to perform a first encryption operation on the first device information to obtain encrypted device information; a second encryption module, configured to perform a second encryption operation on the first PIN code of the cloud certificate based on the encrypted device information to obtain an encrypted PIN code; a third encryption module, configured to perform a third encryption operation on the encrypted device information and the encrypted PIN code to generate encrypted ciphertext; and a sending module, configured to generate a user login request based on the encrypted ciphertext and send the user login request to a server.

[0009] According to a fifth aspect of the present disclosure, an electronic device is provided, comprising: a processor; and a memory for storing processor-executable instructions; wherein the processor is configured to execute the instructions to implement the dual security authentication method described in the first or second aspect.

[0010] According to a sixth aspect of the present disclosure, a computer-readable storage medium is provided, wherein when instructions in the computer-readable storage medium are executed by a processor of an electronic device, the electronic device is enabled to perform the dual security authentication method described in the first or second aspect.

[0011] According to a seventh aspect of the present disclosure, a computer program product is provided, including a computer program that, when executed by a processor, implements the dual security authentication method described in the first or second aspect.

[0012] The technical solution provided by the embodiments of this disclosure brings at least the following beneficial effects: receiving a user login request sent by a terminal device, obtaining encrypted ciphertext from the user login request, performing a first decryption operation on the encrypted ciphertext to obtain encrypted device information and an encrypted PIN code, performing a key generation operation on the encrypted device information to generate a first decryption key, performing a second decryption operation on the encrypted PIN code based on the first decryption key to obtain a first PIN code of the cloud certificate, performing a third decryption operation on the encrypted device information to obtain first device information of the terminal device, performing login security authentication on the terminal device based on the first PIN code and the first device information, and executing the login process in response to successful security authentication. This disclosure performs dual login security authentication on the terminal device through the PIN code and device information, ensuring the security and reliability of the terminal device login security authentication process.

[0013] It should be understood that the above general description and the following detailed description are exemplary and explanatory only, and are not intended to limit this disclosure. Attached Figure Description

[0014] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this disclosure and, together with the description, serve to explain the principles of this disclosure, and are not intended to unduly limit this disclosure.

[0015] Figure 1 This is a flowchart illustrating the dual security authentication method according to the first embodiment of this disclosure.

[0016] Figure 2 This is a flowchart illustrating the dual security authentication method according to the second embodiment of this disclosure.

[0017] Figure 3 This is a flowchart illustrating the dual security authentication method according to the third embodiment of this disclosure.

[0018] Figure 4 This is a block diagram of a dual security authentication device according to a first embodiment of the present disclosure.

[0019] Figure 5 This is a block diagram of a dual security authentication device according to a first embodiment of the present disclosure.

[0020] Figure 6 This is a block diagram illustrating an electronic device according to an exemplary embodiment. Detailed Implementation

[0021] To enable those skilled in the art to better understand the technical solutions of this disclosure, the technical solutions in the embodiments of this disclosure will be clearly and completely described below with reference to the accompanying drawings.

[0022] It should be noted that the terms "first," "second," etc., used in the specification, claims, and accompanying drawings of this disclosure are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of this disclosure described herein can be implemented in orders other than those illustrated or described herein. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this disclosure. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this disclosure as detailed in the appended claims.

[0023] It should be noted that the information (including but not limited to user device information, user personal information, etc.), data (including but not limited to data used for analysis, data stored, data displayed, etc.) and signals involved in this disclosure are all authorized by the user or fully authorized by all parties, and the collection, use and processing of related data must comply with relevant laws, regulations and standards.

[0024] It should be noted that the acquisition, transmission, storage, use, and processing of data in this disclosure comply with the relevant provisions of laws and regulations. In the embodiments of this disclosure, certain software, components, models, and other existing solutions in the industry may be mentioned. These should be considered as exemplary and are intended only to illustrate the feasibility of implementing the technical solution of this disclosure. However, they do not mean that the applicant has used or necessarily used the solution.

[0025] Figure 1 This is a flowchart illustrating the dual security authentication method according to the first embodiment of this disclosure.

[0026] like Figure 1 As shown, the dual security authentication method of the first embodiment of this disclosure includes the following steps:

[0027] In step S101, a user login request sent by a terminal device is received, and encrypted ciphertext is obtained from the user login request.

[0028] In this embodiment of the disclosure, the terminal device generates a user login request based on encrypted ciphertext and sends the user login request to the server via the network. Correspondingly, the server receives the user login request sent by the terminal device.

[0029] Optionally, after receiving a user login request, information can be extracted from the user login request to obtain encrypted ciphertext.

[0030] It should be noted that by obtaining the encrypted device information and the encrypted PIN code, the terminal device can generate encrypted ciphertext based on the encrypted device information and the encrypted PIN code.

[0031] In step S102, the encrypted ciphertext is decrypted to obtain the encrypted device information and the encrypted PIN code.

[0032] In this embodiment of the disclosure, after obtaining the encrypted ciphertext, a first decryption operation can be performed on the encrypted ciphertext to obtain the encrypted device information and the encrypted PIN code.

[0033] Optionally, a target decryption algorithm can be selected to perform a first decryption operation on the encrypted ciphertext to obtain the encrypted device information and the encrypted PIN code.

[0034] In step S103, a key generation operation is performed on the encrypted device information to generate a first decryption key, and a second decryption operation is performed on the encrypted PIN code based on the first decryption key to obtain the first PIN code of the cloud certificate.

[0035] Optionally, a key generation operation can be performed on the encrypted device information based on the encryption algorithm to generate a first decryption key, and a second decryption operation can be performed on the encrypted PIN code based on the first decryption key to obtain the first PIN code.

[0036] In step S104, a third decryption operation is performed on the encrypted device information to obtain the first device information of the terminal device.

[0037] Among them, the first device information of the terminal device refers to the unique identification information of the terminal device.

[0038] For example, the first device information can be the International Mobile Equipment Identity (IMEI), or it can be a combination of the mobile phone number and IMEI corresponding to the terminal device.

[0039] It should be noted that this disclosure does not limit the specific method by which the third decryption operation is performed on the encrypted device information to obtain the first device information of the terminal device.

[0040] Optionally, the first PIN code can be hashed to obtain the hash value of the first PIN code, a second decryption key can be generated based on the hash value of the first PIN code, and a third decryption operation can be performed on the encrypted device information based on the second decryption key to obtain the first device information.

[0041] Optionally, a decryption private key can be determined, and a third decryption operation can be performed on the encrypted device information based on the decryption private key to obtain the first device information.

[0042] In step S105, the terminal device is authenticated for login security based on the first PIN code and the first device information, and the login process is executed in response to successful security authentication.

[0043] In this embodiment of the disclosure, the PIN code information of the cloud certificate stored in the server can be obtained, the second device information bound to the terminal device during registration can be obtained, the terminal device can be subjected to a first security verification based on the first PIN code and the PIN code information, the terminal device can be subjected to a second security verification based on the first device information and the second device information, and in response to the first security verification and the second security verification being passed, it is determined that the terminal device has passed the login security verification.

[0044] In this embodiment of the disclosure, in response to the failure of the first security verification and / or the second security verification of the terminal device, it is determined that the terminal device has failed the login security verification.

[0045] Optionally, after determining that the terminal device has failed the login security authentication, the server may send an error message to the terminal device.

[0046] According to the dual security authentication method provided in this disclosure, a user login request sent by a terminal device is received, and encrypted ciphertext is obtained from the user login request. A first decryption operation is performed on the encrypted ciphertext to obtain encrypted device information and an encrypted PIN code. A key generation operation is performed on the encrypted device information to generate a first decryption key. A second decryption operation is performed on the encrypted PIN code based on the first decryption key to obtain a first PIN code of the cloud certificate. A third decryption operation is performed on the encrypted device information to obtain first device information of the terminal device. Login security authentication is performed on the terminal device based on the first PIN code and the first device information. In response to successful security authentication, the login process is executed. This disclosure performs dual login security authentication on the terminal device through the PIN code and device information, ensuring the security and reliability of the terminal device login security authentication process.

[0047] Figure 2 This is a flowchart illustrating the dual security authentication method according to the second embodiment of this disclosure.

[0048] like Figure 2 As shown, the dual security authentication method of the second embodiment of this disclosure includes the following steps:

[0049] In step S201, a user login request sent by a terminal device is received, and encrypted ciphertext is obtained from the user login request.

[0050] In step S202, the encrypted ciphertext is decrypted for the first time to obtain the encrypted device information and the encrypted PIN code.

[0051] The details of steps S201 and S202 can be found in the above embodiments and will not be repeated here.

[0052] In step S203, a key generation operation is performed on the encrypted device information to generate a first decryption key.

[0053] In this embodiment of the disclosure, after obtaining the encrypted device information, a key generation operation can be performed on the encrypted device information using an asymmetric encryption algorithm to generate a first decryption key.

[0054] For example, the RSA algorithm can be used to generate a key from encrypted device information to create a first decryption key.

[0055] In step S204, the encrypted PIN code is decrypted using the first decryption key to obtain the first PIN code.

[0056] In this embodiment of the disclosure, after obtaining the first decryption key, a second decryption operation can be performed on the encrypted PIN code based on the first decryption key to obtain the first PIN code.

[0057] As one possible implementation, based on the above implementation, the specific process of performing a third decryption operation on the encrypted device information in step S104 to obtain the first device information of the terminal device includes steps S205 to S206:

[0058] In step S205, a hash calculation is performed on the first PIN code to obtain the hash value of the first PIN code.

[0059] In this embodiment of the disclosure, after obtaining the first PIN code, the first PIN code can be hashed using a Secure Hash Algorithm (SHA) to obtain the hash value of the first PIN code.

[0060] For example, the SHA-256 algorithm can be used to generate a key from encrypted device information to create a first decryption key.

[0061] In step S206, a second decryption key is generated based on the hash value of the first PIN code, and a third decryption operation is performed on the encrypted device information based on the second decryption key to obtain the first device information.

[0062] In this embodiment of the disclosure, after obtaining the hash value of the first PIN code, a second decryption key is generated based on the hash value of the first PIN code, and a third decryption operation is performed on the encrypted device information based on the second decryption key to obtain the first device information.

[0063] As one possible implementation, based on the above implementation, the specific process of performing a third decryption operation on the encrypted device information in step S104 to obtain the first device information of the terminal device includes step S207:

[0064] In step S207, the decryption private key is determined, and the encrypted device information is decrypted based on the decryption private key to obtain the first device information.

[0065] Optionally, a decryption private key can be generated using an asymmetric encryption algorithm and stored in a preset location. The first device information can be obtained by calling the decryption private key to perform a third decryption operation on the encrypted device information.

[0066] As one possible implementation, based on the above implementation, the specific process of performing login security authentication on the terminal device in step S105 according to the first PIN code and the first device information includes steps S208 to S206:

[0067] In step S208, the PIN code information of the cloud certificate stored in the server is obtained.

[0068] In this embodiment of the disclosure, after generating the PIN code information of the cloud certificate, the PIN code information of the cloud certificate can be stored in the server.

[0069] Optionally, the second PIN code of the cloud certificate set during registration can be obtained through a security interface, a random string of the second PIN code can be generated, and the second PIN code and the random string can be combined to obtain the first combination information. The hash value of the second PIN code can be obtained by hashing the first combination information, which is used as the PIN code information of the cloud certificate.

[0070] In step S209, the information of the second device bound during the registration of the terminal device is obtained.

[0071] For example, the second device information can be the IMEI bound to the terminal device during registration; another example is that the second device information can be a combination of the IMEI bound to the terminal device during registration and the mobile phone number corresponding to the terminal device.

[0072] In step S2010, the terminal device is subjected to the first security verification based on the first PIN code and PIN code information.

[0073] In this embodiment of the disclosure, a random string associated with the first PIN code can be retrieved, and the first PIN code and the random string can be combined to obtain second combined information. The second combined information can be hashed to obtain the hash value of the first PIN code. It can be determined whether the hash value of the first PIN code and the hash value of the second PIN code are consistent. In response to the hash value of the first PIN code and the hash value of the second PIN code being consistent, it is determined that the terminal device has passed the first security verification.

[0074] In step S2011, a second layer of security verification is performed on the terminal device based on the first device information and the second device information.

[0075] In this embodiment of the disclosure, after obtaining the first device information and the second device information, it can be determined whether the first device information and the second device information are consistent. In response to the first device information and the second device information being consistent, it is determined that the terminal device has passed the second security verification.

[0076] In step S2012, in response to the successful completion of both the first and second security verifications, it is determined that the terminal device has passed the login security verification.

[0077] In step S2013, the login process is executed in response to successful security authentication.

[0078] In this embodiment of the disclosure, in order to ensure the security and reliability of the login process, the frequency of abnormal logins of the terminal device within a set time period can be recorded. In response to the abnormal login frequency of the terminal device being greater than the set frequency, when the terminal device passes the login security authentication, the user's biometric information of the terminal device is obtained, and identity verification is performed based on the user's biometric information. The login process is then started after the identity verification is passed.

[0079] It should be noted that this disclosure does not limit abnormal login behavior of terminal devices, such as: the terminal device attempting to log in multiple times in a short period of time; or the terminal device logging in from different geographical locations in a short period of time.

[0080] It should be noted that this disclosure does not limit the setting of the duration. For example, the duration can be 1 day; or the duration can be 1 week.

[0081] It should be noted that this disclosure does not limit the setting of user biometric information. For example, user biometric information may be fingerprints; or user biometric information may be faces.

[0082] According to the dual security authentication method provided in this disclosure, a user login request sent by a terminal device is received, and encrypted ciphertext is obtained from the user login request. A first decryption operation is performed on the encrypted ciphertext to obtain encrypted device information and an encrypted PIN code. A key generation operation is performed on the encrypted device information to generate a first decryption key. A second decryption operation is performed on the encrypted PIN code based on the first decryption key to obtain a first PIN code. A hash calculation is performed on the first PIN code to obtain a hash value of the first PIN code. A second decryption key is generated based on the hash value of the first PIN code. A third decryption operation is performed on the encrypted device information based on the second decryption key to obtain the first device information. Alternatively, a decryption private key is determined, and a third decryption operation is performed on the encrypted device information based on the decryption private key. The system obtains first device information, retrieves the PIN code of the cloud certificate stored on the server, and obtains the second device information bound during terminal device registration. Based on the first PIN code and the PIN code information, it performs a first layer of security verification on the terminal device. Based on the first device information and the second device information, it performs a second layer of security verification on the terminal device. Upon successful completion of both the first and second security verifications, the terminal device is determined to have passed the login security verification. In response to the successful security authentication, the login process is executed. Therefore, this disclosure provides dual login security authentication for terminal devices, effectively preventing unauthorized access and dangerous behaviors. While providing convenient services, it also takes into account security and privacy protection, ensuring the security and reliability of the terminal device login security authentication process.

[0083] Figure 3 This is a flowchart illustrating the dual security authentication method according to the third embodiment of this disclosure.

[0084] like Figure 3 As shown, the dual security authentication method of the third embodiment of this disclosure includes the following steps:

[0085] In step S301, the first device information of the terminal device and the first PIN code of the cloud certificate are obtained.

[0086] In this embodiment of the disclosure, the unique identification information of the terminal device can be obtained and used as the first device information of the terminal device.

[0087] For example, the first device information can be the IMEI, or it can be a combination of the mobile phone number and IMEI corresponding to the terminal device.

[0088] The first PIN code of a cloud certificate usually refers to a Personal Identification Number (PIN code), which is used to verify identity and ensure security. In mobile cloud certificate solutions, the PIN code is used to enhance the security of transactions. By setting the first PIN code of the cloud certificate, the security of the transaction process can be further improved.

[0089] In this embodiment of the disclosure, after a user completes cloud certificate registration, a password can be set as the first PIN code of the cloud certificate.

[0090] Furthermore, to enhance PIN code security, the PIN code can be changed within a preset time period.

[0091] Optionally, the first PIN code must meet preset complexity requirements, such as: the first PIN code must contain uppercase and lowercase letters and numbers; or the first PIN code must contain uppercase and lowercase letters, numbers and special characters.

[0092] Optionally, when a user uses the cloud certificate service for the first time, they can register using the mobile phone number corresponding to their terminal device. The system will send a one-time verification code (One-Time Password, or OTP). After entering the correct verification code, the user completes the cloud certificate registration.

[0093] In this embodiment of the disclosure, the first PIN code can be encrypted using SHA-256 and by adding a salt value, and the encrypted first PIN code can be stored in the server.

[0094] In step S302, the first device information is encrypted to obtain encrypted device information.

[0095] It should be noted that this disclosure performs a first encryption operation on the first device information, and the specific method for obtaining the encrypted device information is not limited and can be selected according to the actual situation.

[0096] Optionally, the first PIN code can be hashed to obtain the hash value of the first PIN code, a first encryption key can be generated based on the hash value of the first PIN code, and a first encryption operation can be performed on the first device information based on the first encryption key to obtain the encrypted device information.

[0097] Optionally, a public encryption key can be determined, and a first encryption operation can be performed on the first device information based on the public encryption key to obtain encrypted device information.

[0098] In step S303, based on the encrypted device information, the first PIN code of the cloud certificate is subjected to a second encryption operation to obtain an encrypted PIN code.

[0099] It should be noted that after obtaining the encrypted device information, in order to improve the encryption strength of the encrypted PIN code, the encrypted device information can be used as an additional encryption parameter to perform a second encryption operation on the first PIN code of the cloud certificate based on the encrypted device information, so as to obtain the encrypted PIN code.

[0100] In this embodiment of the disclosure, after obtaining the encryption device information, a key generation operation can be performed on the encryption device information, and a second encryption operation can be performed on the first PIN code based on the second encryption key to obtain the encrypted PIN code.

[0101] In step S304, a third encryption operation is performed on the encrypted device information and the encrypted PIN code to generate encrypted ciphertext.

[0102] It should be noted that by performing a third encryption operation on the encrypted device information and the encrypted PIN code, it is ensured that even if a single encryption layer is cracked, sensitive information cannot be directly obtained.

[0103] It should be noted that this disclosure performs a third encryption operation on the encrypted device information and the encrypted PIN code. The specific method for generating the encrypted ciphertext is not limited and can be selected according to the actual situation.

[0104] Alternatively, a second encryption operation can be performed using the Advanced Encryption Standard (AES) to generate encrypted ciphertext.

[0105] In step S305, a user login request is generated based on the encrypted ciphertext and sent to the server.

[0106] In this embodiment of the disclosure, after obtaining the encrypted ciphertext, a login request can be generated based on the encrypted ciphertext and sent to the server to perform subsequent authentication processes through the server.

[0107] Optionally, to ensure the security of data transmission and prevent data interception during transmission, a user login request can be sent to the server using Hypertext Transfer Protocol Secure (HTTPS).

[0108] According to the dual security authentication method provided in this disclosure, by obtaining first device information of the terminal device and a first PIN code of the cloud certificate, a first encryption operation is performed on the first device information to obtain encrypted device information. Based on the encrypted device information, a second encryption operation is performed on the first PIN code of the cloud certificate to obtain an encrypted PIN code. A third encryption operation is performed on the encrypted device information and the encrypted PIN code to generate encrypted ciphertext. A user login request is generated based on the encrypted ciphertext and sent to the server. Thus, this disclosure performs a third encryption operation on the encrypted device information and the encrypted PIN code to generate encrypted ciphertext, ensuring the security of the encrypted ciphertext and laying the foundation for subsequent security authentication.

[0109] Figure 4 This is a block diagram of a dual security authentication device according to a first embodiment of the present disclosure.

[0110] like Figure 4 As shown, the dual security authentication device 400 of this embodiment includes: a receiving module 401, a first decryption module 402, a second decryption module 403, a third decryption module 404, and an authentication module 405.

[0111] The receiving module 401 is used to receive a user login request sent by the terminal device and obtain encrypted ciphertext from the user login request;

[0112] The first decryption module 402 is used to perform a first decryption operation on the encrypted ciphertext to obtain the encryption device information and the encryption PIN code.

[0113] The second decryption module 403 is used to perform a key generation operation on the encrypted device information, generate a first decryption key, and perform a second decryption operation on the encrypted PIN code based on the first decryption key.

[0114] Decrypt the code to obtain the first PIN code of the cloud certificate.

[0115] The third decryption module 404 is used to perform a third decryption operation on the encrypted device information to obtain the first device information of the terminal device.

[0116] The authentication module 405 is used to perform login security authentication on the terminal device based on the first PIN code and the first device information, and execute the login process in response to successful security authentication.

[0117] In one embodiment of this disclosure, the third decryption module 404 is further configured to: perform a hash calculation on the first PIN code to obtain a hash value of the first PIN code; generate a second decryption key based on the hash value of the first PIN code; and perform a third decryption operation on the encrypted device information based on the second decryption key to obtain the first device information.

[0118] In one embodiment of this disclosure, the third decryption module 404 is further configured to: determine a decryption private key, and perform a third decryption operation on the encrypted device information based on the decryption private key to obtain the first device information.

[0119] In one embodiment of this disclosure, the authentication module 405 is further configured to: obtain the PIN code information of the cloud certificate stored in the server; obtain the second device information bound to the terminal device during registration; perform a first security verification on the terminal device based on the first PIN code and the PIN code information; perform a second security verification on the terminal device based on the first device information and the second device information; and determine that the terminal device has passed the login security verification in response to both the first and second security verifications being passed.

[0120] In one embodiment of this disclosure, the process of generating the PIN code information of the cloud certificate includes: obtaining the second PIN code of the cloud certificate set during registration through a security interface; generating a random string of the second PIN code, and combining the second PIN code and the random string to obtain first combined information; performing a hash calculation on the first combined information to obtain the hash value of the second PIN code, which is used as the PIN code information of the cloud certificate.

[0121] In one embodiment of this disclosure, the authentication module 405 is further configured to: retrieve a random string associated with the first PIN code, and combine the first PIN code and the random string to obtain second combined information; perform a hash calculation on the second combined information to obtain a hash value of the first PIN code; determine whether the hash value of the first PIN code and the hash value of the second PIN code are consistent; and, in response to the hash value of the first PIN code and the hash value of the second PIN code being consistent, determine that the terminal device has passed the first security verification.

[0122] In one embodiment of this disclosure, the device 400 is further configured to: record the frequency of abnormal logins of the terminal device within a set time period; in response to the abnormal login frequency of the terminal device being greater than the set frequency, obtain the user biometric information of the terminal device when the terminal device passes login security authentication; perform identity verification based on the user biometric information; and initiate the login process after passing the identity verification.

[0123] Regarding the apparatus in the above embodiments, the specific manner in which each module performs its operation has been described in detail in the embodiments related to the method, and will not be elaborated upon here.

[0124] In summary, the dual security authentication device provided in this disclosure receives a user login request sent by a terminal device, obtains encrypted ciphertext from the user login request, performs a first decryption operation on the encrypted ciphertext to obtain encrypted device information and an encrypted PIN code, performs a key generation operation on the encrypted device information to generate a first decryption key, performs a second decryption operation on the encrypted PIN code based on the first decryption key to obtain a first PIN code of the cloud certificate, performs a third decryption operation on the encrypted device information to obtain first device information of the terminal device, performs login security authentication on the terminal device based on the first PIN code and the first device information, and executes the login process in response to successful security authentication. This disclosure performs dual login security authentication on the terminal device through the PIN code and device information, ensuring the security and reliability of the terminal device login security authentication process.

[0125] Figure 5 This is a block diagram of a dual security authentication device according to a first embodiment of the present disclosure.

[0126] like Figure 5 As shown, the dual security authentication device 500 of this embodiment includes: an acquisition module 501, a first encryption module 502, a second encryption module 503, a third encryption module 504, and a sending module 505.

[0127] Module 501 is used to obtain the first device information of the terminal device and the first PIN code of the cloud certificate.

[0128] The first encryption module 502 is used to perform a first encryption operation on the first device information to obtain encrypted device information;

[0129] The second encryption module 503 is used to perform a second encryption operation on the first PIN code of the cloud certificate based on the encryption device information to obtain an encrypted PIN code;

[0130] The third encryption module 504 is used to perform a third encryption operation on the encryption device information and the encryption PIN code to generate encrypted ciphertext.

[0131] The sending module 505 is used to generate a user login request based on the encrypted ciphertext and send the user login request to the server.

[0132] In one embodiment of this disclosure, the first encryption module 502 is further configured to: perform a hash calculation on the first PIN code to obtain a hash value of the first PIN code; generate a first encryption key based on the hash value of the first PIN code; and perform a first encryption operation on the first device information based on the first encryption key to obtain the encrypted device information.

[0133] In one embodiment of this disclosure, the first encryption module 502 is further configured to: determine an encryption public key, and perform a first encryption operation on the first device information based on the encryption public key to obtain encrypted device information.

[0134] In one embodiment of this disclosure, the second encryption module 503 is further configured to: perform a key generation operation on the encryption device information to generate a second encryption key; and perform a second encryption operation on the first PIN code based on the second encryption key to obtain the encrypted PIN code.

[0135] Regarding the apparatus in the above embodiments, the specific manner in which each module performs its operation has been described in detail in the embodiments related to the method, and will not be elaborated upon here.

[0136] In summary, the dual security authentication device provided in this disclosure obtains first device information of the terminal device and a first PIN code of the cloud certificate, performs a first encryption operation on the first device information to obtain encrypted device information, performs a second encryption operation on the first PIN code of the cloud certificate based on the encrypted device information to obtain an encrypted PIN code, performs a third encryption operation on the encrypted device information and the encrypted PIN code to generate encrypted ciphertext, generates a user login request based on the encrypted ciphertext, and sends the user login request to the server. Thus, this disclosure performs a third encryption operation on the encrypted device information and the encrypted PIN code to generate encrypted ciphertext, ensuring the security of the encrypted ciphertext and laying the foundation for subsequent security authentication.

[0137] Figure 6 This is a block diagram illustrating an electronic device according to an exemplary embodiment.

[0138] like Figure 6 As shown, the above-mentioned electronic device 600 includes:

[0139] The memory 610 and processor 620 are connected by a bus 630, which connects the different components (including the memory 610 and the processor 620). The memory 610 stores a computer program that implements the dual security authentication method described in the first or second aspect of this disclosure when the processor 620 executes the program.

[0140] Bus 630 represents one or more of several bus architectures, including a memory bus or memory controller, a peripheral bus, a graphics acceleration port, a processor, or a local bus using any of the various bus architectures. Examples of these architectures include, but are not limited to, the Industry Standard Architecture (ISA) bus, the Micro Channel Architecture (MAC) bus, the Enhanced ISA bus, the Video Electronics Standards Association (VESA) local bus, and the Peripheral Component Interconnect (PCI) bus.

[0141] Electronic device 600 typically includes a variety of electronic device readable media. These media can be any available media that can be accessed by electronic device 600, including volatile and non-volatile media, removable and non-removable media.

[0142] Memory 610 may also include computer system readable media in the form of volatile memory, such as random access memory (RAM) 640 and / or cache memory 650. Electronic device 600 may further include other removable / non-removable, volatile / non-volatile computer system storage media. By way of example only, storage system 660 can be used to read and write non-removable, non-volatile magnetic media (… Figure 6 Not shown; usually referred to as a "hard drive"). Although Figure 6 Not shown, a disk drive for reading and writing to a removable non-volatile disk (e.g., a "floppy disk") and an optical disk drive for reading and writing to a removable non-volatile optical disk (e.g., a CD-ROM, DVD-ROM, or other optical media) may be provided. In these cases, each drive may be connected to bus 630 via one or more data media interfaces. Memory 610 may include at least one program product having a set (e.g., at least one) of program modules configured to perform the functions of the embodiments of this disclosure.

[0143] A program / utility 680 having a set (at least one) of program modules 670 may be stored in, for example, memory 610. Such program modules 670 include—but are not limited to—an operating system, one or more application programs, other program modules, and program data. Each or some combination of these examples may include an implementation of a network environment. Program modules 670 typically perform the functions and / or methods described in the embodiments of this disclosure.

[0144] Electronic device 600 can also communicate with one or more external devices 690 (e.g., keyboard, pointing device, display 691, etc.), and with one or more devices that enable a user to interact with the electronic device 600, and / or with any device that enables the electronic device 600 to communicate with one or more other computing devices (e.g., network card, modem, etc.). This communication can be performed through input / output (I / O) interface 692. Furthermore, electronic device 600 can also communicate with one or more networks (e.g., local area network (LAN), wide area network (WAN), and / or public networks, such as the Internet) through network adapter 693. Figure 6As shown, network adapter 693 communicates with other modules of electronic device 600 via bus 630. It should be understood that, although not shown in the figures, other hardware and / or software modules can be used in conjunction with electronic device 600, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems.

[0145] The processor 620 executes various functional applications and data processing by running programs stored in the memory 610.

[0146] It should be noted that the implementation process and technical principles of the electronic device in this embodiment are explained in the foregoing description of the dual security authentication method of this disclosure embodiment, and will not be repeated here.

[0147] In summary, the electronic device provided in this disclosure can execute the dual security authentication method described above. It receives a user login request sent by a terminal device, obtains encrypted ciphertext from the request, performs a first decryption operation on the ciphertext to obtain encrypted device information and an encrypted PIN code, performs a key generation operation on the encrypted device information to generate a first decryption key, performs a second decryption operation on the encrypted PIN code based on the first decryption key to obtain a first PIN code for a cloud certificate, performs a third decryption operation on the encrypted device information to obtain first device information for the terminal device, and performs login security authentication on the terminal device based on the first PIN code and the first device information. Upon successful security authentication, the login process is executed. This disclosure performs dual login security authentication on the terminal device using the PIN code and device information, ensuring the security and reliability of the terminal device login security authentication process.

[0148] To implement the above embodiments, this disclosure also proposes a computer-readable storage medium.

[0149] When the instructions in the computer-readable storage medium are executed by the processor of the electronic device, the electronic device is able to perform the dual security authentication method as described above. Optionally, the computer-readable storage medium may be a ROM, random access memory (RAM), CD-ROM, magnetic tape, floppy disk, or optical data storage device, etc.

[0150] To implement the above embodiments, this disclosure also provides a computer program product, including a computer program, characterized in that, when the computer program is executed by a processor, it implements the dual security authentication method described in the first or second aspect.

[0151] Other embodiments of this disclosure will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein. This disclosure is intended to cover any variations, uses, or adaptations of this disclosure that follow the general principles of this disclosure and include common knowledge or customary techniques in the art not disclosed herein. The specification and examples are to be considered exemplary only, and the true scope and spirit of this disclosure are indicated by the following claims.

[0152] It should be understood that this disclosure is not limited to the precise structures described above and shown in the accompanying drawings, and various modifications and changes can be made without departing from its scope. The scope of this disclosure is limited only by the appended claims.

Claims

1. A dual-security authentication method, characterized in that, include: Receive a user login request sent by a terminal device, and obtain encrypted ciphertext from the user login request; The encrypted ciphertext is decrypted in the first step to obtain the encrypted device information and the encrypted PIN code. A key generation operation is performed on the encrypted device information to generate a first decryption key, and a second decryption operation is performed on the encrypted PIN code based on the first decryption key to obtain the first PIN code of the cloud certificate; A third decryption operation is performed on the encrypted device information to obtain the first device information of the terminal device; Based on the first PIN code and the first device information, the terminal device is authenticated for login security, and the login process is executed in response to successful security authentication. The third decryption operation on the encrypted device information to obtain the first device information of the terminal device includes: Perform a hash calculation on the first PIN code to obtain the hash value of the first PIN code; Based on the hash value of the first PIN code, a second decryption key is generated, and a third decryption operation is performed on the encrypted device information based on the second decryption key to obtain the first device information.

2. The method according to claim 1, characterized in that, The third decryption operation on the encrypted device information to obtain the first device information of the terminal device includes: Determine the decryption private key, and perform a third decryption operation on the encrypted device information based on the decryption private key to obtain the first device information.

3. The method according to any one of claims 1-2, characterized in that, The step of performing login security authentication on the terminal device based on the first PIN code and the first device information includes: Obtain the PIN code information of the cloud certificate stored in the server; Obtain the information of the second device bound during the registration of the terminal device; The terminal device is subjected to a first layer of security verification based on the first PIN code and PIN code information. Based on the first device information and the second device information, a second layer of security verification is performed on the terminal device; In response to the successful completion of both the first and second security verifications, it is determined that the terminal device has passed the login security verification.

4. The method according to claim 3, characterized in that, The process of generating the PIN code information for the cloud certificate includes: The second PIN code of the cloud certificate set during registration is obtained through a secure interface; Generate a random string for the second PIN code, and combine the second PIN code and the random string to obtain the first combination information; The hash value of the second PIN code is obtained by performing a hash calculation on the first combination of information, and is used as the PIN code information of the cloud certificate.

5. The method according to claim 4, characterized in that, The first security verification of the terminal device based on the first PIN code and PIN code information includes: Retrieve the random string associated with the first PIN code, and combine the first PIN code and the random string to obtain the second combined information; The second combination of information is hashed to obtain the hash value of the first PIN code; Determine whether the hash value of the first PIN code and the hash value of the second PIN code are the same; If the hash value of the first PIN code matches the hash value of the second PIN code, it is determined that the terminal device has passed the first security verification.

6. The method according to any one of claims 1-2, characterized in that, The method further includes: The frequency of abnormal logins of the terminal device within a set time period is recorded. In response to the abnormal login frequency of the terminal device being greater than the set frequency, the user's biometric information of the terminal device is obtained when the terminal device passes the login security authentication. The user's biometric information is used to verify their identity, and the login process is initiated only after the identity verification is successful.

7. A dual-security authentication method, characterized in that, include: Obtain the first device information of the terminal device and the first PIN code of the cloud certificate; Perform a first encryption operation on the first device information to obtain encrypted device information; Based on the encryption device information, a second encryption operation is performed on the first PIN code of the cloud certificate to obtain an encrypted PIN code; A third encryption operation is performed on the encrypted device information and the encrypted PIN code to generate encrypted ciphertext; A user login request is generated based on the encrypted ciphertext, and the user login request is sent to the server. The first encryption operation on the first device information to obtain encrypted device information includes: Perform a hash calculation on the first PIN code to obtain the hash value of the first PIN code; A first encryption key is generated based on the hash value of the first PIN code; Based on the first encryption key, the first device information is encrypted to obtain the encrypted device information; The step of performing a second encryption operation on the first PIN code of the cloud certificate based on the encryption device information to obtain an encrypted PIN code includes: A key generation operation is performed on the encrypted device information to generate a second encryption key; The first PIN code is encrypted using the second encryption key to obtain the encrypted PIN code.

8. The method according to claim 7, characterized in that, The first encryption operation on the first device information to obtain encrypted device information includes: Determine the encryption public key, and perform a first encryption operation on the first device information based on the encryption public key to obtain encrypted device information.

9. A dual security authentication device, characterized in that, The device includes: The receiving module is used to receive a user login request sent by the terminal device and obtain encrypted ciphertext from the user login request; The first decryption module is used to perform a first decryption operation on the encrypted ciphertext to obtain the encryption device information and the encryption PIN code. The second decryption module is used to perform a key generation operation on the encrypted device information to generate a first decryption key, and to perform a second decryption operation on the encrypted PIN code based on the first decryption key to obtain the first PIN code of the cloud certificate. The third decryption module is used to perform a third decryption operation on the encrypted device information to obtain the first device information of the terminal device. The authentication module is used to perform login security authentication on the terminal device based on the first PIN code and the first device information, and execute the login process in response to successful security authentication; The third decryption module is used to perform a hash calculation on the first PIN code to obtain the hash value of the first PIN code; Based on the hash value of the first PIN code, a second decryption key is generated, and a third decryption operation is performed on the encrypted device information based on the second decryption key to obtain the first device information.

10. A dual security authentication device, characterized in that, The device includes: The acquisition module is used to acquire the first device information of the terminal device and the first PIN code of the cloud certificate; The first encryption module is used to perform a first encryption operation on the first device information to obtain encrypted device information; The second encryption module is used to perform a second encryption operation on the first PIN code of the cloud certificate based on the encryption device information to obtain an encrypted PIN code. The third encryption module is used to perform a third encryption operation on the encryption device information and the encryption PIN code to generate encrypted ciphertext. The sending module is used to generate a user login request based on the encrypted ciphertext and send the user login request to the server. The first encryption module is used to perform a hash calculation on the first PIN code to obtain the hash value of the first PIN code; A first encryption key is generated based on the hash value of the first PIN code; Based on the first encryption key, the first device information is encrypted to obtain the encrypted device information; The second encryption module is used to perform a key generation operation on the encryption device information to generate a second encryption key; The first PIN code is encrypted using the second encryption key to obtain the encrypted PIN code.

11. An electronic device, characterized in that, include: processor; Memory configured to store processor-executable instructions; The processor is configured to execute the instructions to implement the dual security authentication method as described in any one of claims 1-6 or 7-8.

12. A computer-readable storage medium, wherein instructions in the computer-readable storage medium, when executed by a processor of an electronic device, enable the electronic device to perform the dual security authentication method as described in any one of claims 1-6 or 7-8.

13. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the dual security authentication method as described in any one of claims 1-6 or 7-8.

Images