Dynamic password transmission method and device, computer equipment and storage medium

Abstract

The invention provides a dynamic password transmission method and device, computer equipment and a storage medium, and the method comprises the steps: waking up a first NFC module to receive a data reading instruction transmitted by a second NFC module when the distance between the first NFC module and reading equipment containing the second NFC module is smaller than a preset distance threshold value; reading a target counter value, a seed key and NDEF record data stored in the dynamic password token; target NDEF record data is generated according to the target counter value, the seed key and the NDEF record data, the target NDEF record data comprises a dynamic password, and the dynamic password is generated according to the seed key and the target counter value; and calling the first NFC module to send the target NDEF record data to a reading device through the second NFC module. According to the embodiment of the invention, the user does not need to check the dynamic password displayed on the token screen, the operation is simple, and the password leakage risk does not exist.

Description

Technical Field

[0001] The present application relates to the field of information security technology, and in particular to a dynamic password transmission method, device, computer equipment and storage medium. Background Art

[0002] A dynamic password token is a security device used to generate a dynamic password (also known as a one-time password, One-Time Password, OTP). Dynamic passwords are often used to enhance the security of identity authentication, especially in online banking, online payment, and other systems that require high security. Dynamic passwords are based on an assumption that only legitimate users can hold and access dynamic password tokens, that tokens are unique and private, and that the dynamic passwords generated by tokens are unpredictable. The working principle of a dynamic password token is to generate a new, unique password within a specific time interval (such as 30 seconds or 60 seconds) or each time it is used. This password can only be used once and becomes invalid after it expires.

[0003] When using the existing dynamic password token, the user needs to check the dynamic password displayed on the token screen. This method is cumbersome to operate and there is a risk of password leakage. Summary of the invention

[0004] In view of this, the present application proposes a dynamic password transmission method, apparatus, computer equipment and storage medium to solve the problem that the existing dynamic password tokens are cumbersome to operate and have low security when used.

[0005] A first aspect of the present application provides a method for transmitting a dynamic password, which is applied to a dynamic password token. The dynamic password token includes a first NFC module. The method includes:

[0006] When the distance between the first NFC module and the reading device including the second NFC module is less than a preset distance threshold, waking up the first NFC module to receive a data reading instruction transmitted by the second NFC module;

[0007] Read the target counter value, seed key and NDEF record data stored in the dynamic password token;

[0008] Generate target NDEF record data according to the target counter value, the seed key and the NDEF record data, wherein the target NDEF record data includes a dynamic password, and the dynamic password is generated according to the seed key and the target counter value;

[0009] The first NFC module is called to send the target NDEF record data to the reading device through the second NFC module.

[0010] The disclosed embodiment wakes up the first NFC module to receive a data reading instruction transmitted by the second NFC module when the distance between the first NFC module and the reading device including the second NFC module is less than a preset distance threshold, generates target NDEF record data according to the target counter value, the seed key and the NDEF record data, and calls the first NFC module to send the target NDEF record data to the reading device through the second NFC module. This can eliminate the need for the user to view the dynamic password displayed on the token screen, is simple to operate, and does not involve the risk of password leakage.

[0011] In an embodiment of the present application, reading the target counter value, seed key and NDEF record data stored in the dynamic password token includes:

[0012] Read the counter value stored inside the dynamic password token;

[0013] The counter value is subjected to a preset transformation to obtain the target counter value.

[0014] In an embodiment of the present application, generating target NDEF record data according to the target counter value, the seed key and the NDEF record data includes:

[0015] Generate the dynamic password according to the target counter value and the seed key;

[0016] The dynamic password is stored in the payload field of the NDEF record data to obtain the target NDEF record data.

[0017] The second aspect of the present application provides a method for obtaining a dynamic password, which is applied to a reading device, wherein the reading device includes a second NFC module; the method includes:

[0018] In the case of determining that the first NFC module in the dynamic password token is awakened, sending a data reading instruction to the dynamic password token, so that the dynamic password token reads the target counter value, the seed key and the NDEF record data stored inside the dynamic password token; generating target NDEF record data according to the target counter value, the seed key and the NDEF record data, and calling the first NFC module to send the target NDEF record data to the reading device through the second NFC module; the first NFC module in the dynamic password token is awakened when the distance between the dynamic password token and the reading device is less than a preset distance threshold; the target NDEF record data includes a dynamic password, and the dynamic password is generated according to the seed key and the target counter value;

[0019] The target NDEF record data from the first NFC module is received through the second NFC module, and the dynamic password in the target NDEF record data is read.

[0020] In an embodiment of the present application, after reading the dynamic password in the target NDEF record data, the method further includes:

[0021] The dynamic password is displayed on the reading device.

[0022] In an embodiment of the present application, after reading the dynamic password in the target NDEF record data, the method further includes:

[0023] Read the URI information in the target NDEF record data;

[0024] Determine a target application corresponding to the URI information, and start the target application;

[0025] The dynamic password is sent to the started target application, so that the started target application completes the user login according to the dynamic password and the locally cached user information.

[0026] The third aspect of the present application provides a dynamic password transmission device, which is applied to a dynamic password token. The dynamic password token includes a first NFC module. The device includes:

[0027] An NFC wake-up module, configured to wake up the first NFC module to receive a data reading instruction transmitted by the second NFC module when the distance between the first NFC module and the reading device including the second NFC module is less than a preset distance threshold;

[0028] A data reading module, used to read the target counter value, seed key and NDEF record data stored in the dynamic password token;

[0029] a target NDEF record data generating module, configured to generate target NDEF record data according to the target counter value, the seed key and the NDEF record data, wherein the target NDEF record data includes a dynamic password, and the dynamic password is generated according to the seed key and the target counter value;

[0030] The target NDEF record data sending module is used to call the first NFC module to send the target NDEF record data to the reading device through the second NFC module.

[0031] The fourth aspect of the present application provides a dynamic password transmission device, which is applied to a reading device, wherein the reading device includes a second NFC module; the device includes:

[0032] A data reading instruction sending module is used to send a data reading instruction to the dynamic password token when it is determined that the first NFC module in the dynamic password token is awakened, so that the dynamic password token reads the target counter value, the seed key and the NDEF record data stored inside the dynamic password token; generates the target NDEF record data according to the target counter value, the seed key and the NDEF record data, and calls the first NFC module to send the target NDEF record data to the reading device through the second NFC module; the first NFC module in the dynamic password token is awakened when the distance between the dynamic password token and the reading device is less than a preset distance threshold; the target NDEF record data includes a dynamic password, and the dynamic password is generated according to the seed key and the target counter value;

[0033] The target NDEF record data receiving module is used to receive the target NDEF record data from the first NFC module through the second NFC module, and read the dynamic password in the target NDEF record data.

[0034] An embodiment of the fifth aspect of the present application provides a computer device, which includes a memory and a processor, the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the dynamic password transmission method described in the first aspect by executing the computer instructions.

[0035] The embodiment of the sixth aspect of the present application provides a computer-readable storage medium, on which computer instructions are stored, and the computer instructions are used to enable a computer to execute the dynamic password transmission method described in the first aspect above.

[0036] Additional aspects and advantages of the present application will be given in part in the description below, and in part will become apparent from the description below, or will be learned through the practice of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] By reading the detailed description of the preferred embodiment below, various other advantages and benefits will become clear to those of ordinary skill in the art. The accompanying drawings are only used for the purpose of illustrating the preferred embodiment and are not considered to be limitations of the present application. In addition, the same reference symbols are used to represent the same components throughout the accompanying drawings.

[0038] In the attached picture:

[0039] Figure 1 A schematic diagram of a flow chart of a dynamic password transmission method provided by an embodiment of the present application is shown;

[0040] Figure 2A schematic diagram showing a flow chart of another dynamic password transmission method provided by an embodiment of the present application;

[0041] Figure 3 A schematic diagram showing a flow chart of another dynamic password transmission method provided by an embodiment of the present application;

[0042] Figure 4 A schematic diagram showing a flow chart of another dynamic password transmission method provided by an embodiment of the present application;

[0043] Figure 5 A schematic diagram showing a flow chart of another dynamic password transmission method provided by an embodiment of the present application;

[0044] Figure 6 A schematic diagram of the structure of a dynamic password transmission device provided in one embodiment of the present application is shown;

[0045] Figure 7 A schematic diagram of the structure of a computer device provided by an embodiment of the present application is shown;

[0046] Figure 8 A schematic diagram of a storage medium provided in an embodiment of the present application is shown. DETAILED DESCRIPTION

[0047] The exemplary embodiments of the present application will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present application are shown in the accompanying drawings, it should be understood that the present application can be implemented in various forms and should not be limited by the embodiments described herein. On the contrary, these embodiments are provided in order to enable a more thorough understanding of the present application and to fully convey the scope of the present application to those skilled in the art.

[0048] It should be noted that, unless otherwise specified, the technical terms or scientific terms used in this application should have the common meanings understood by technicians in the field to which this application belongs.

[0049] The following describes the technical scenarios involved in the embodiments of the present application.

[0050] The existing technology mainly includes two types of dynamic password tokens: hardware form and software form;

[0051] The hardware-based dynamic password token usually has components such as a battery, a button, a display screen, and a shell. The seed key is stored in the security chip inside the token and the dynamic password is calculated, and the dynamic password is displayed on the token screen. Its disadvantages are: compared with NFC tags, it has more components and higher costs; compared with NFC tags, it is larger and inconvenient to carry; users need to observe the dynamic password displayed on the screen and then manually input it into the authentication system or software, which is cumbersome.

[0052] The software-based dynamic password is usually implemented as a dedicated mobile phone APP, which uses the security mechanism of the mobile phone operating system to save the seed key and displays the dynamic password on the dedicated APP interface. Its disadvantages are: the security of the seed key is protected by software logic, which is weaker than the protection capability of the security chip; the dynamic password displayed on the APP interface may be stolen by malicious software.

[0053] Based on this, the present application provides a hardware-based dynamic password token, which can achieve the following purposes:

[0054] 1. Hardware dynamic password token in the form of card or tag, with high security, low cost and small size;

[0055] 2. Counter-synchronized dynamic password, each time the mobile phone is close to the token to read the dynamic password is counted as a counting event;

[0056] 3. “Touch and Pay” experience in line with NFC NDEF specification:

[0057] (a) No need to install special software, just put your mobile phone close to the token, and the mobile phone will automatically read and display the dynamic password from the token;

[0058] (b) As long as the mobile phone is placed close to the token, the designated APP will be automatically launched, and the APP will automatically obtain a dynamic password, which can be used for seamless and secure interactions in scenarios such as user login and identity authentication.

[0059] According to an embodiment of the present application, an embodiment of a dynamic password transmission method is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0060] Embodiment 1:

[0061] In this embodiment, a dynamic password transmission method is provided, which can be used for a dynamic password token, and the dynamic password token includes a first NFC module;

[0062] In some specific embodiments, the appearance of the dynamic password token includes but is not limited to: a standard IC card, a special-shaped card, a mini card, a coin-like card, a ring, a bracelet, a jewelry pendant, a pendant, a label that can be pasted on the surface of other objects, and an embedded circuit component.

[0063] Figure 1 is a flow chart of a dynamic password transmission method according to an embodiment of the present application. Figure 1 As shown, the process includes the following steps:

[0064] Step S101: when the distance between the first NFC module and the reading device including the second NFC module is less than a preset distance threshold, waking up the first NFC module to receive a data reading instruction transmitted by the second NFC module.

[0065] The preset distance threshold can be set according to actual conditions and is not specifically limited here. The reading device includes but is not limited to various electronic devices, such as mobile phones and computers.

[0066] In the embodiment of the present application, when the dynamic password token is close to the reading device, the reading device will generate an electromagnetic field, and the dynamic password token will obtain power from it and be awakened, thereby establishing a communication connection between the first NFC (Near Field Communication) module of the dynamic password token and the second NFC module of the reading device. After the NFC communication connection between the dynamic password token and the reading device is established, the reading device will send a data reading instruction to the dynamic password token, and the data reading instruction is used to read the target NDEF record data (NFC Data Exchange Format, near field communication data exchange format) from the dynamic password token.

[0067] Step S102, reading the target counter value, seed key and NDEF record data stored inside the dynamic password token.

[0068] In the embodiment of the present application, the dynamic password token has NFC communication function, supports the NDEF data exchange protocol defined by the NFC Forum, and can store NDEF record data. The dynamic password token also stores the seed key and internal counter used to generate the dynamic password.

[0069] In some specific embodiments, step S102 further includes steps S1021 and S1022:

[0070] Step S1021, reading the counter value stored inside the dynamic password token.

[0071] Step S1022: Perform a preset transformation on the counter value to obtain the target counter value.

[0072] The preset transformation may be to add one to the counter value, for example, reading the counter value "4" stored in the token, adding 1 to the counter value, and storing a new counter value "5". This application does not limit the specific transformation of the preset transformation, as long as the counter value before and after the transformation and the generated dynamic password are in a one-to-one correspondence.

[0073] In the embodiment of the present application, as a counter-synchronized dynamic password, each time the NDEF record data is read by an external reading device (such as a mobile phone), the internal counter value increases by 1. (It can also be described as an event-based dynamic password, with the reading of the NDEF record as a trigger event).

[0074] Step S103: Generate target NDEF record data according to the target counter value, the seed key and the NDEF record data.

[0075] The target NDEF record data includes a dynamic password, and the dynamic password is generated according to the seed key and the target counter value.

[0076] In some specific embodiments, the above step S103 includes step S1031-step S1032:

[0077] Step S1031: Generate the dynamic password according to the target counter value and the seed key.

[0078] In the embodiment of the present application, according to GM / T 0021 "Technical Specifications for Application of Dynamic Passwords and Cryptography", a corresponding dynamic password can be generated according to the target counter value and the seed key.

[0079] Step S1032: Store the dynamic password into the payload field of the NDEF record data to obtain the target NDEF record data.

[0080] In the embodiment of the present application, the payload field refers to the load part of the NDEF record data. The NDEF record data consists of two parts: a header part and a payload part, wherein the header part contains information such as the status byte, type length, and load length of the NDEF record, and the payload part contains the actual data to be transmitted.

[0081] Step S104: calling the first NFC module to send the target NDEF record data to the reading device through the second NFC module.

[0082] In some specific embodiments, the type of target NDEF record data is related to the specific application scenario. For example, when a reading device (such as a mobile phone) is used as a display of a token, the target NDEF record data includes a Text Record Type: used to store text; the reading device will display the text message after reading the record; when automatically starting the APP and logging in securely without feeling, the target NDEF record data includes a URI Record Type: used to store a URI (Uniform Resource Identifier); after the mobile phone operating system reads the record, it will open a specified web page, or start a specified APP and pass the URI to the APP.

[0083] Embodiment 2:

[0084] The embodiment of the present application also provides a method for obtaining a dynamic password, the method is applied to a reading device, the reading device includes a second NFC module; the method includes:

[0085] Step S201, when it is determined that the first NFC module in the dynamic password token is awakened, sends a data read instruction to the dynamic password token so that the dynamic password token reads the target counter value, seed key and NDEF record data stored inside the dynamic password token; generates target NDEF record data according to the target counter value, the seed key and the NDEF record data, and calls the first NFC module to send the target NDEF record data to the reading device through the second NFC module.

[0086] Among them, the first NFC module in the dynamic password token is awakened when the distance between the dynamic password token and the reading device is less than a preset distance threshold; the target NDEF record data includes a dynamic password, and the dynamic password is generated according to the seed key and the target counter value.

[0087] Step S202: receiving target NDEF record data from the first NFC module through the second NFC module, and reading the dynamic password in the target NDEF record data.

[0088] In some specific embodiments, after the above step S202, the method further includes:

[0089] Step S203: displaying the dynamic password on the reading device.

[0090] In the embodiment of the present application, when the target NDEF record data received by the reading device is a Text Record Type, the reading device will display the Text Record Type on the display so that the user can see the dynamic password. Wherein, the TextRecord Type represents a text message containing a one-time dynamic password generated by the token; for example, "OTP: 748903".

[0091] In some specific embodiments, after the above step S202, the method further includes steps S2041-S2042:

[0092] Step S2041, reading the URI information in the target NDEF record data.

[0093] Step S2042: determine the target application corresponding to the URI information, and start the target application.

[0094] Step S2043: Send the dynamic password to the started target application, so that the started target application completes the user login according to the dynamic password and the locally cached user information.

[0095] In an embodiment of the present application, when the reading device receives the target NDEF record data as a URI Record Type, it finds the installed specified APP according to the URI information, automatically starts the APP, and passes the dynamic password to the APP, so that the APP can automatically complete the user login without user operation through the dynamic password combined with the locally cached user account information.

[0096] Embodiment 3:

[0097] The present application embodiment provides a dynamic password transmission method, such as Figure 2 As shown:

[0098] Step S301, the token is brought close to the electromagnetic field generated by an external NFC device (such as a mobile phone), the token obtains electrical energy and is activated, and the NFC communication connection is initialized;

[0099] Step S302, the token receives an instruction / instruction sequence from an external NFC device, the instruction being used to read NDEF record data from the token;

[0100] Step S303, the token reads the internally stored counter value, adds 1 to the counter value, and stores the new counter value;

[0101] Step S304, the token uses the internally stored seed key and the current internal counter value to calculate and generate a dynamic password;

[0102] Step S305, the token reads the internally stored NDEF record data requested by the instruction in step 2;

[0103] Step S306, the token fills the dynamic password generated in step 4 into a specific position in the NDEF record data;

[0104] Step S307: The token returns an NDEF data response to the external device.

[0105] Embodiment 4:

[0106] For the application scenario of "using a mobile phone as a display of a token", the present application embodiment provides a specific embodiment, for example Figure 3 As shown:

[0107] Step S401, when the mobile phone is close to the token, the mobile phone system reads the NDEF record in the token through the NFC function.

[0108] Step S402, the token will return a "Text Record Type" data, which represents a text message, including the one-time dynamic password generated by the token; for example, "OTP: 748903";

[0109] Step S403, after the mobile phone operating system reads the data, it will display the text message to the user (this process is a public technology), and the user can see the dynamic password.

[0110] The above process is completed by the mobile phone operating system (mainstream mobile phone operating systems such as Android and iOS already support the NDEF protocol), and there is no need to install a dedicated APP.

[0111] In this embodiment, the mobile phone is used as the display screen of the token to display the dynamic password to the user. After the user obtains the dynamic password, the method of using the dynamic password is the same as that of the traditional token, for example, the dynamic password is filled in the web page or APP for identity authentication.

[0112] Embodiment 5:

[0113] For the application scenario of "automatically starting the APP and logging in securely without feeling", this application provides a specific embodiment, for example Figure 4 As shown:

[0114] Step S501, when the mobile phone is close to the token, the mobile phone system reads the NDEF record in the token through the NFC function;

[0115] Step S502, the token will return a "URI Record Type" data, which represents a URI, including the information of the APP used to process the URI and the one-time dynamic password generated by the token; for example, "https: / / api.myapp.com / login?otp=748903";

[0116] Step S503, after the mobile phone operating system reads the data, it will find the installed specified APP according to the URI, the system will automatically start the APP, and pass the URI to the APP;

[0117] Step S504, after the APP is started, the dynamic password generated by the token is obtained from the incoming URI, and combined with the locally cached user account information, the user login can be automatically completed without user operation.

[0118] In the above process, users only need to bring their mobile phone close to the token to automatically start the specific APP and complete the dynamic password verification without any feeling, thus achieving automatic and secure login. Traditional dynamic password tokens cannot achieve the above functions.

[0119] In terms of security, the user's login credentials are unpredictable one-time dynamic passwords generated by a physical token, which has a unique seed key and cannot be copied. No party other than the actual holder of the physical entity of the token can calculate the correct dynamic password. Compared with the technical solution of caching the user's login status or caching the user's login credentials in the software, the technical solution of the present invention is more secure.

[0120] Embodiment 6:

[0121] For the application scenario of "when the APP requires user authentication, automatically obtain a dynamic password through NFC touch", this application provides a specific embodiment, such as Figure 5 As shown:

[0122] Step S601: The user first starts an APP. During use, the APP needs to perform user identity verification;

[0123] Step S602, the APP prompts the user to use the NFC "touch and pay" function for identity authentication, and guides the user to place the phone close to the token;

[0124] Step S603, when the mobile phone is close to the token, the mobile phone system reads the NDEF record in the token through the NFC function;

[0125] Step S604, the token will return a "URI Record Type" data, which represents a URI, including the information of the APP used to process the URI and the one-time dynamic password generated by the token; for example, "https: / / api.myapp.com / login?otp=748903";

[0126] Step S605, after the mobile phone operating system reads the data, it passes the URI to the APP;

[0127] Step S606: The APP obtains the dynamic password generated by the token from the incoming URI, and automatically verifies the dynamic password without user input.

[0128] In the above process, users only need to place their mobile phone close to the token to complete user authentication. Compared with the traditional dynamic password token, which requires users to enter the dynamic password by themselves, it is simpler and more convenient. Compared with the technical solution of saving user identity credentials in the software, it is more secure.

[0129] This application has the following beneficial effects:

[0130] Compared with traditional dynamic password tokens, it has a simpler structure, lower cost, more convenient use and easier to carry;

[0131] Compared with software dynamic passwords and other software identity authentication solutions, it has physical anti-copying characteristics and is more secure;

[0132] The generation, transmission and verification of dynamic passwords are completed at the same time of NFC "touch and hold", providing a seamless user authentication experience.

[0133] Corresponding to the implementation of the above dynamic password transmission method, the embodiment of the present application also provides a dynamic password transmission device for executing the above Figures 1 to 5 The dynamic password transmission method described in any of the embodiments shown in the figure. Figure 6 As shown, the device is applied to a dynamic password token, and the dynamic password token includes a first NFC module; the device includes:

[0134] An NFC wake-up module, configured to wake up the first NFC module to receive a data reading instruction transmitted by the second NFC module when the distance between the first NFC module and the reading device including the second NFC module is less than a preset distance threshold;

[0135] A data reading module, used to read the target counter value, seed key and NDEF record data stored in the dynamic password token;

[0136] a target NDEF record data generating module, configured to generate target NDEF record data according to the target counter value, the seed key and the NDEF record data, wherein the target NDEF record data includes a dynamic password, and the dynamic password is generated according to the seed key and the target counter value;

[0137] The target NDEF record data sending module is used to call the first NFC module to send the target NDEF record data to the reading device through the second NFC module.

[0138] Optionally, the data reading module is further used to read the counter value stored inside the dynamic password token; perform a preset transformation on the counter value to obtain the target counter value.

[0139] Optionally, the target NDEF record data generation module is used to: generate the dynamic password according to the target counter value and the seed key; store the dynamic password in the payload field of the NDEF record data to obtain the target NDEF record data.

[0140] The embodiment of the present disclosure further provides a dynamic password transmission device, which is applied to a reading device, wherein the reading device includes a second NFC module; the device includes:

[0141] A data reading instruction sending module is used to send a data reading instruction to the dynamic password token when it is determined that the first NFC module in the dynamic password token is awakened, so that the dynamic password token reads the target counter value, the seed key and the NDEF record data stored inside the dynamic password token; generates the target NDEF record data according to the target counter value, the seed key and the NDEF record data, and calls the first NFC module to send the target NDEF record data to the reading device through the second NFC module; the first NFC module in the dynamic password token is awakened when the distance between the dynamic password token and the reading device is less than a preset distance threshold; the target NDEF record data includes a dynamic password, and the dynamic password is generated according to the seed key and the target counter value;

[0142] The target NDEF record data receiving module is used to receive the target NDEF record data from the first NFC module through the second NFC module, and read the dynamic password in the target NDEF record data.

[0143] Optionally, a dynamic password display module is used to display the dynamic password on the reading device after reading the dynamic password in the target NDEF record data.

[0144] Optionally, the device further comprises:

[0145] A URI information reading module, used to read the URI information in the target NDEF record data;

[0146] A target application startup module, used to determine a target application corresponding to the URI information and start the target application;

[0147] The user login module is used to send the dynamic password to the started target application so that the started target application completes the user login according to the dynamic password and the locally cached user information.

[0148] The dynamic password transmission device provided in the above-mentioned embodiment of the present application and the dynamic password transmission method provided in the embodiment of the present application are based on the same inventive concept and have the same beneficial effects as the methods adopted, run or implemented by the application programs stored therein.

[0149] The present application also provides a computer device to execute the above-mentioned dynamic password transmission method. Figure 7 , which shows a schematic diagram of a computer device provided by some embodiments of the present application. Figure 7As shown, the computer device 7 includes: a processor 700, a memory 701, a bus 702 and a communication interface 703, wherein the processor 700, the communication interface 703 and the memory 701 are connected via the bus 702; the memory 701 stores a computer program that can be run on the processor 700, and the processor 700 executes the aforementioned Figures 1 to 5 A dynamic password transmission method provided by any of the illustrated implementations.

[0150] The memory 701 may include a high-speed random access memory (RAM), and may also include a non-volatile memory (non-volatile memory), such as at least one disk storage. The communication connection between the system network element and at least one other network element is realized through at least one communication interface 703 (which may be wired or wireless), and the Internet, wide area network, local area network, metropolitan area network, etc. may be used.

[0151] The bus 702 may be an ISA bus, a PCI bus, or an EISA bus. The bus may be divided into an address bus, a data bus, a control bus, etc. The memory 701 is used to store programs. After receiving the execution instruction, the processor 700 executes the program. Figures 1 to 5 The dynamic password transmission method disclosed in any of the illustrated embodiments may be applied to the processor 700 or implemented by the processor 700 .

[0152] The processor 700 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by the hardware integrated logic circuit or software instructions in the processor 700. The above processor 700 can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a readily available programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps and logic block diagrams disclosed in the embodiments of the present application can be implemented or executed. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc. The steps of the method disclosed in the embodiments of the present application can be directly embodied as a hardware decoding processor to be executed, or the hardware and software modules in the decoding processor can be executed. The software module can be located in a mature storage medium in the field such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory 701, and the processor 700 reads the information in the memory 701 and completes the steps of the above method in combination with its hardware.

[0153] The computer device provided in the embodiment of the present application and the dynamic password transmission method provided in the embodiment of the present application are based on the same inventive concept and have the same beneficial effects as the methods adopted, run or implemented therein.

[0154] The present application also provides a computer-readable storage medium corresponding to the dynamic password transmission method provided in the above embodiment. Figure 8 The computer-readable storage medium shown is a CD 30 on which a computer program (ie, a program product) is stored. When the computer program is run by a processor, the dynamic password transmission method provided in any of the aforementioned embodiments will be executed.

[0155] It should be noted that examples of the computer-readable storage medium may also include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other optical or magnetic storage media, which are not listed here one by one.

[0156] The computer-readable storage medium provided in the above-mentioned embodiment of the present application and the dynamic password transmission method provided in the embodiment of the present application are based on the same inventive concept and have the same beneficial effects as the method adopted, run or implemented by the application program stored therein.

[0157] It should be noted that:

[0158] In the description provided herein, a large number of specific details are described. However, it is understood that the embodiments of the present application can be practiced without these specific details. In some instances, well-known structures and technologies are not shown in detail so as not to obscure the understanding of this description.

[0159] Similarly, it should be understood that in order to streamline the present application and help understand one or more of the various inventive aspects, in the above description of the exemplary embodiments of the present application, the various features of the present application are sometimes grouped together into a single embodiment, figure, or description thereof. However, the disclosed method should not be interpreted as reflecting the following schematic diagram: the claimed application requires more features than the features clearly stated in each claim. More specifically, as reflected in the claims below, the inventive aspects are less than all the features of the single embodiment disclosed above. Therefore, the claims following the specific embodiment are hereby expressly incorporated into the specific embodiment, wherein each claim itself serves as a separate embodiment of the present application.

[0160] In addition, those skilled in the art will appreciate that, although some embodiments described herein include certain features included in other embodiments but not other features, the combination of features of different embodiments is meant to be within the scope of the present application and form different embodiments. For example, in the claims below, any one of the claimed embodiments may be used in any combination.

[0161] The above is only a preferred specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any changes or substitutions that can be easily thought of by a person skilled in the art within the technical scope disclosed in the present application should be included in the protection scope of the present application. Therefore, the protection scope of the present application shall be based on the protection scope of the claims.

Claims

1. A dynamic password transmission method, characterized in that: The method is applied to a dynamic password token, and the dynamic password token includes a first NFC module; the method includes: When the distance between the first NFC module and the reading device including the second NFC module is less than a preset distance threshold, waking up the first NFC module to receive a data reading instruction transmitted by the second NFC module; Read the target counter value, seed key and NDEF record data stored in the dynamic password token; Generate target NDEF record data according to the target counter value, the seed key and the NDEF record data, wherein the target NDEF record data includes a dynamic password, and the dynamic password is generated according to the seed key and the target counter value; The first NFC module is called to send the target NDEF record data to the reading device through the second NFC module.

2. The method according to claim 1, characterized in that Read the target counter value, seed key and NDEF record data stored in the dynamic password token, including: Read the counter value stored inside the dynamic password token; The counter value is subjected to a preset transformation to obtain the target counter value.

3. The method according to claim 1 or 2, characterized in that: Generating target NDEF record data according to the target counter value, the seed key and the NDEF record data, comprising: Generate the dynamic password according to the target counter value and the seed key; The dynamic password is stored in the payload field of the NDEF record data to obtain the target NDEF record data.

4. A method for obtaining a dynamic password, characterized in that: The method is applied to a reading device, wherein the reading device includes a second NFC module; the method includes: In the case of determining that the first NFC module in the dynamic password token is awakened, sending a data reading instruction to the dynamic password token, so that the dynamic password token reads the target counter value, the seed key and the NDEF record data stored inside the dynamic password token; generating target NDEF record data according to the target counter value, the seed key and the NDEF record data, and calling the first NFC module to send the target NDEF record data to the reading device through the second NFC module; the first NFC module in the dynamic password token is awakened when the distance between the dynamic password token and the reading device is less than a preset distance threshold; the target NDEF record data includes a dynamic password, and the dynamic password is generated according to the seed key and the target counter value; The target NDEF record data from the first NFC module is received through the second NFC module, and the dynamic password in the target NDEF record data is read.

5. The method according to claim 4, characterized in that After reading the dynamic password in the target NDEF record data, the method further includes: The dynamic password is displayed on the reading device.

6. The method according to claim 4, characterized in that After reading the dynamic password in the target NDEF record data, the method further includes: Read the URI information in the target NDEF record data; Determine a target application corresponding to the URI information, and start the target application; The dynamic password is sent to the started target application, so that the started target application completes the user login according to the dynamic password and the locally cached user information.

7. A dynamic password transmission device, characterized in that: The device is applied to a dynamic password token, and the dynamic password token includes a first NFC module; the device includes: An NFC wake-up module, configured to wake up the first NFC module to receive a data reading instruction transmitted by the second NFC module when the distance between the first NFC module and the reading device including the second NFC module is less than a preset distance threshold; A data reading module, used to read the target counter value, seed key and NDEF record data stored in the dynamic password token; a target NDEF record data generating module, configured to generate target NDEF record data according to the target counter value, the seed key and the NDEF record data, wherein the target NDEF record data includes a dynamic password, and the dynamic password is generated according to the seed key and the target counter value; The target NDEF record data sending module is used to call the first NFC module to send the target NDEF record data to the reading device through the second NFC module.

8. A dynamic password transmission device, characterized in that: The device is applied to a reading device, wherein the reading device includes a second NFC module; the device includes: A data reading instruction sending module is used to send a data reading instruction to the dynamic password token when it is determined that the first NFC module in the dynamic password token is awakened, so that the dynamic password token reads the target counter value, the seed key and the NDEF record data stored inside the dynamic password token; generates the target NDEF record data according to the target counter value, the seed key and the NDEF record data, and calls the first NFC module to send the target NDEF record data to the reading device through the second NFC module; the first NFC module in the dynamic password token is awakened when the distance between the dynamic password token and the reading device is less than a preset distance threshold; the target NDEF record data includes a dynamic password, and the dynamic password is generated according to the seed key and the target counter value; The target NDEF record data receiving module is used to receive the target NDEF record data from the first NFC module through the second NFC module, and read the dynamic password in the target NDEF record data.

9. A computer device, characterized in that: include: A memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the method according to any one of claims 1 to 6 by executing the computer instructions.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the method according to any one of claims 1 to 6.

Images