Authentication verification method and device of operating system, equipment and product

Abstract

The invention discloses an authentication verification method and device for an operating system, equipment and a product, and the method comprises the steps: obtaining attribute information through the operating system, and generating a first character string according to the attribute information; sending the first character string to an external device; receiving a second character string which is returned by the external equipment and is used for authentication, wherein the second character string comprises a random character string; according to a preset rule, combining the first character string and the random character string to generate a third character string; and if the specified position of the third character string is the same as the specified position of the second character string, the operation system passes authentication verification. According to the authentication verification method and device of the operating system, the equipment and the product, the character string used for authentication verification can be generated through dynamic change, the security of authentication verification is greatly improved, meanwhile, the authentication verification process operation can be recorded at any time, and management of a manager is facilitated.

Description

Technical Field

[0001] The present invention belongs to the field of system security, and in particular relates to an authentication and verification method, device, equipment and product for an operating system. Background Art

[0002] Under existing technical conditions, authentication verification of general operating systems usually uses a pre-authorization method to generate a serial number. During authentication verification, the authentication can be completed by entering the pre-authorized serial number. The serial number is not generated in real time. The serial number generated by this method can be used repeatedly, so there is a relatively large security risk. At the same time, the existing operating system authentication method cannot report the authentication service status in a timely manner, and management personnel cannot timely understand the authentication usage of the software. Summary of the invention

[0003] In view of this, the present invention aims to overcome the defects in the prior art and proposes an authentication and verification method, device, equipment and product for an operating system.

[0004] To achieve the above object, the technical solution of the present invention is achieved as follows: In a first aspect, an authentication and verification method for an operating system is applied to an operating system end, comprising: The operating system obtains attribute information, and generates a first character string according to the attribute information, wherein the attribute information includes: system information of the operating system and hardware information carrying the operating system; Sending a first character string to an external device; receiving a second character string for authentication returned by an external device, wherein the second character string includes a random character string; According to a preset rule, the first character string and the random character string are combined to generate a third character string; If the designated position of the third character string is the same as the designated position of the second character string, the operating system authentication is successful.

[0005] In one embodiment of the present invention, the attribute information is represented in the form of key-value pairs, and the attribute information represented in the form of key-value pairs is connected one by one to form a first character string.

[0006] In one embodiment of the present invention, the second character string and the third character string are encrypted using the same encryption method.

[0007] In one embodiment of the present invention, the system information includes an operating system serial number, a system name, and a kernel version.

[0008] In one embodiment of the present invention, the attribute information includes the network card MAC address and hard disk attributes.

[0009] In one embodiment of the present invention, sending the first character string to an external device includes: generating a two-dimensional code image according to the first character string, and the external device scanning the two-dimensional code image to obtain the first character string.

[0010] In a second aspect, the present invention discloses an authentication and verification method for an operating system, which is applied to an external device end, and includes: obtaining a first character string sent by the operating system end, and generating a random character string; According to a preset rule, the first character string and the random character string are combined to generate a second character string, and the second character string is sent to the operating system end.

[0011] In a third aspect, the present invention discloses an authentication and verification device for an operating system, the device comprising: A first generating module is used for the operating system to obtain attribute information and generate a first character string according to the attribute information, wherein the attribute information includes: system information of the operating system and hardware information carrying the operating system; A sending module, used for sending a first character string to an external device; A receiving module, used for receiving a second character string for authentication returned by an external device, wherein the second character string includes a random character string; A second generating module, used for combining the first character string and the random character string to generate a third character string according to a preset rule; The authentication verification module is used to verify that the operating system authentication is successful if the designated position of the third character string is the same as the designated position of the second character string.

[0012] In a fourth aspect, the present invention discloses an electronic device, comprising: one or more processors; a storage device for storing one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors execute the above method.

[0013] According to a fifth aspect, a computer program product comprises a computer program, and the computer program implements the above method when executed by a processor.

[0014] Compared with the prior art, the present invention has the following advantages: The present invention discloses an authentication and verification method, device, equipment and product for an operating system, including the operating system obtaining attribute information, and generating a first character string according to the attribute information; sending the first character string to an external device; receiving a second character string for authentication returned by the external device, wherein the second character string contains a random character string; combining the first character string and the random character string to generate a third character string according to a preset rule; if the designated position of the third character string is the same as the designated position of the second character string, the operating system authentication and verification passes. The present invention discloses an authentication and verification method, device, equipment and product for an operating system, which can realize dynamic change to generate a character string for authentication and verification, greatly improving the security of authentication and verification, and can record the authentication and verification process at any time, facilitating management personnel to manage. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] The accompanying drawings, which constitute a part of the present invention, are used to provide a further understanding of the present invention. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute improper limitations on the present invention.

[0016] In the attached picture: Figure 1 A schematic diagram of an application scenario of an authentication and verification method for an operating system according to an embodiment of the present invention; Figure 2 A schematic diagram of an operating system end of an authentication and verification method for an operating system according to an embodiment of the present invention; Figure 3 A schematic diagram of an external device end of an authentication and verification method for an operating system according to an embodiment of the present invention; Figure 4 A schematic diagram of an authentication and verification method device for an operating system according to an embodiment of the present invention; Figure 5 The present invention is a schematic diagram of an electronic device for an authentication and verification method of an operating system according to an embodiment of the present invention. DETAILED DESCRIPTION

[0017] It should be noted that, in the absence of conflict, the embodiments of the present invention and the features in the embodiments may be combined with each other.

[0018] In the description of the present invention, it should be understood that the terms "center", "longitudinal", "lateral", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside" and "outside" etc., indicating orientations or positional relationships, are based on the orientations or positional relationships shown in the accompanying drawings, and are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore should not be understood as a limitation on the present invention.

[0019] In the description of the present invention, it should be noted that, unless otherwise clearly specified and limited, the terms "installed", "connected", and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, or it can be the internal communication of two components. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood by specific circumstances.

[0020] In the description of the present invention, it should be further explained that the terms "first", "second", etc. are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Thus, a feature defined as "first", "second", etc. may explicitly or implicitly include one or more of the features. In the description of the present invention, unless otherwise specified, "plurality" means two or more.

[0021] The application scenarios of the authentication and verification method, device, equipment and product of an operating system disclosed in the present invention are as follows: Figure 1 As shown, including the operating system end and the external device end, under the existing technical conditions, the authentication verification of the general operating system usually adopts the pre-authorization method to generate the serial number, and the authentication verification can be completed by inputting the pre-authorized serial number. The serial number generated by this method can be used repeatedly, so there is a relatively large security risk, and the authentication service situation cannot be reported in time, and the management personnel cannot timely understand the authentication and use of the software. An authentication verification method, device, equipment and product of an operating system disclosed by the present invention can realize dynamic changes to generate a string for authentication verification, greatly improving the security of authentication verification, and can record the authentication verification process at any time, which is convenient for management personnel to manage.

[0022] The present invention will be described in detail below with reference to the accompanying drawings and in conjunction with embodiments.

[0023] In one embodiment of the present invention, Figure 2 As shown, an authentication and verification method for an operating system, applied to an operating system side, includes: Step S201: the operating system obtains attribute information, and generates a first character string according to the attribute information, wherein the attribute information includes: system information of the operating system and information of hardware carrying the operating system; In this embodiment, illustratively, the operating system is a Linux system installed on a mobile medium, and the external device is a mobile phone; At this time, the operating system is in unauthenticated mode, which limits the operating permissions of the operating system.

[0024] In this embodiment, the system information includes the operating system serial number, system name, and kernel version.

[0025] In this embodiment, the attribute information includes the network card MAC address and hard disk attributes.

[0026] Exemplarily, the system information may also include current date and time information and other random information.

[0027] In this embodiment, the attribute information is represented in the form of key-value pairs, and the attribute information represented in the form of key-value pairs is connected one by one to form a first character string.

[0028] For example, the attribute information is represented in the form of key-value, sorted from small to large based on the key, and saved in memory. In C++, the storage data structure is represented by map, and in Python, the storage data structure is represented by dict; In this embodiment, the key-value pairs are randomly traversed, the random number s, and s>0, the serial number i, n is the number of key-value pairs, and the modulo operation formula i=s%n is used to obtain the key and value content of the i-th attribute, generate the key=value in the string format, and then delete the value of the key-value with the serial number i in the data structure, repeat the execution until there is no data in the data structure, and finally the string is combined into the first string in the format of key=value&key=value..., which is expressed as content; Step S202, sending a first character string to an external device; In this embodiment, sending the first character string to the external device includes: generating a two-dimensional code image according to the first character string, and the external device scanning the two-dimensional code image to obtain the first character string.

[0029] In this embodiment, based on the first character string content, a URL format character string httpurl is generated, and the format is defined as: httpurl=https: / / ip:port..&content; Use Python's qrcode library for conversion, and convert the httpurl string into a QR code image by calling the make_image() function method of qrcode.

[0030] After the QR code image is generated, the operating system displays the QR code image on the LivecdClient front-end interface. The external device scans the QR code image to obtain the first character string. At this time, the operator enters the ID, phone number and other usage information from the external device (such as a mobile phone) so that the management personnel can timely count and understand the authentication usage of the software.

[0031] like Figure 3 As shown, the method is applied to the external device end and also includes: Step S301, obtaining a first character string sent by the operating system, and generating a random character string; Step S302: According to a preset rule, the first character string and the random character string are combined to generate a second character string, and the second character string is sent to the operating system end.

[0032] The process of the external device generating the second string is as follows: Get the first string content; The format of content is key=value&key=value...; By intercepting the & symbol, the content is converted into key=value format and sorted from small to large based on the key; Generate a string key=value?key=value... sorted from small to large, represented as authcontent; The external device randomly generates characters d2, d3, d4, and d5, wherein characters d2 and d3 are inserted at the front of the string authcontent, and characters d4 and d5 are inserted at the end of the string authcontent, to obtain the string autocontent; autocontent=[d2,d3]+authcontent+[d4,d5]; The randomly generated strings d2, d3, d4, and d5 are inserted at the end of the string autocontent in sequence to obtain the second string, which is represented by sn1.

[0033] sn1=autocontent+[d2,d3,d4,d5]; Step S203, receiving a second character string for authentication returned by the external device, wherein the second character string includes a random character string; In this embodiment, the mobile phone displays the second character string, i.e., the authentication serial number; the operator inputs the second character string as the authentication serial number into the operating system, i.e., receives the second character string for authentication returned by the external device; Step S204, combining the first character string and the random character string to generate a third character string according to a preset rule; In this embodiment, according to the preset rules, the operating system generates the third character string as follows: Get the first string content; The format of content is key=value&key=value...; By intercepting the & symbol, the content is converted into key=value format and sorted from small to large based on the key; Generate a string key=value?key=value... sorted from small to large, represented as authcontent; According to the second string sn1 returned by the external device, the random strings d2, d3, d4, and d5 are obtained. The characters d2 and d3 are inserted to the front of the string authcontent, and the characters d4 and d5 are inserted to the end of the string authcontent to obtain the string autocontent. autocontent=[d2,d3]+authcontent+[d4,d5]; The randomly generated strings d2, d3, d4, and d5 are inserted at the end of the string autocontent in sequence to obtain the second string, which is represented by sn2.

[0034] sn2=autocontent+[d2,d3,d4,d5]; Step S205: If the designated position of the third character string is the same as the designated position of the second character string, the operating system authentication is successful.

[0035] In this embodiment, if the third character string sn2 generated by the operating system is the same as the second character string sn1 returned by the external device, the operating system authentication verification is passed; In this embodiment, security restrictions are imposed on the operation of the operating system before the authentication verification is successful. The operating system is released after the authentication verification is completed. During the authentication process, the external device automatically collects authentication information, thereby improving the security and controllability of the use of the operating system. Furthermore, the external device randomly generates character strings d2, d3, d4, and d5, thereby realizing the dynamic change of each authentication verification of the second character string sn1 and the third character string sn2, which cannot be reused, and greatly improving the security of the authentication verification.

[0036] Based on the previous embodiment, in another embodiment of the present invention, the second character string sn1 and the third character string sn2 may be encrypted using the same encryption method, such as md5 encryption; In this embodiment, md5 encryption can use the hashlib library of python, or the linux command md5sum; Furthermore, the odd-numbered digits of the encrypted second string sn1 and the third string sn2 are retained to obtain shortened strings sn11 and sn21. The operating system and the external device insert the CRC16 check codes e1, e2, e3, and e4 after the string sn11 and the string sn21, respectively, to obtain the string sn12 and the string sn22; sn12=sn11+[e1,e2,e3,e4]; sn22=sn21+[e1,e2,e3,e4]; In this implementation, step S205, if the designated position of the third character string is the same as the designated position of the second character string, includes: If the string sn11 at the position specified by the string sn12 is different from the string sn21 at the position specified by the string sn22, the authentication verification fails. If they are the same, the authentication verification continues with the verification code [e1, e2, e3, e4] at the position specified by the string sn12 and the verification code [e1, e2, e3, e4] at the position specified by the string sn22. If they are the same, the authentication verification succeeds. If they are different, the authentication verification fails.

[0037] In this embodiment, the setting of double authentication and verification further improves the security of authentication and verification.

[0038] like Figure 4 As shown, the present invention also discloses an authentication and verification device for an operating system, the device comprising: The first generating module 401 is used for the operating system to obtain attribute information and generate a first character string according to the attribute information, wherein the attribute information includes: system information of the operating system and hardware information carrying the operating system; A sending module 402, configured to send a first character string to an external device; The receiving module 403 is used to receive a second character string for authentication returned by an external device, where the second character string includes a random character string; The second generating module 404 is used to combine the first character string and the random character string to generate a third character string according to a preset rule; The authentication verification module 405 is used to verify that the operating system authentication is successful if the designated position of the third character string is the same as the designated position of the second character string.

[0039] The present invention also discloses an electronic device, such as Figure 5 As shown, an embodiment is disclosed, which is a block diagram of an electronic device suitable for authentication and verification of the above-mentioned operating system.

[0040] The electronic device 50 of this embodiment includes a processor 501, which can perform various appropriate actions and processes according to the program stored in the ROM 502 or the program loaded from the storage part 508 to the RAM 503. The processor 501 may include, for example, a general-purpose microprocessor, an instruction set processor and / or a related chipset and / or a dedicated microprocessor, etc. The processor 501 may also include an onboard memory for caching purposes. The processor 501 may include a single processing unit or multiple processing units for performing different actions of the method flow according to the embodiment of the present invention.

[0041] In RAM503, various programs and data required for the operation of electronic device 50 are stored. Processor 501, ROM502 and RAM503 are connected to each other via bus 504, and processor 501 performs various operations of the method flow according to the embodiment of the present invention by executing the program in ROM502 and / or RAM503. It should be noted that the program can also be stored in one or more memories other than ROM502 and RAM503, and processor 501 can also perform various operations of the method flow according to the embodiment of the present invention by executing the program stored in one or more memories.

[0042] According to an embodiment of the present invention, the electronic device 50 may further include an I / O interface 505, which is also connected to the bus 504. The electronic device 50 may further include one or more of the following components connected to the I / O interface 505: an input portion 506 including a keyboard, a mouse, etc.; an output portion 507 including a cathode ray tube, a liquid crystal display, and a speaker; a storage portion 508 including a hard disk, etc.; and a communication portion 509 including a network interface card such as a LAN card, a modem, etc. The communication portion 509 performs communication processing via a network such as the Internet. A drive 5010 is also connected to the I / O interface 505 as needed. A removable medium 5011, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 5010 as needed, so that a computer program read therefrom is installed into the storage portion 508 as needed.

[0043] The present invention also provides a computer-readable storage medium.

[0044] The computer-readable storage medium may be included in the electronic device / device system described in the above embodiment; or it may exist independently without being assembled into the electronic device / device. The above computer-readable storage medium carries one or more programs, and when the above one or more programs are executed, the method according to the embodiment of the present invention is implemented.

[0045] According to an embodiment of the present invention, the computer-readable storage medium may be a non-volatile computer-readable storage medium. For example, it may include but is not limited to: a portable computer disk, a hard disk, a random access memory RAM, a read-only memory ROM, an erasable programmable read-only memory EPROM or a flash memory, a portable compact disk read-only memory CD-ROM, an optical storage device, a magnetic storage device, or any suitable combination thereof. In the present invention, the computer-readable storage medium may be any tangible medium containing or storing a program, which may be used by or in combination with an instruction execution system, apparatus, or device.

[0046] Embodiments of the present invention also include a computer program product.

[0047] The computer program product includes a computer program, which contains program codes for executing the method provided by the embodiment of the present invention. When the computer program product runs on an electronic device, the program codes are used to enable the electronic device to implement the method provided by the embodiment of the present invention.

[0048] In one embodiment, the computer program may rely on a tangible storage medium such as an optical storage device or a magnetic storage device. In another embodiment, the computer program may also be transmitted and distributed in the form of a signal on a network medium. The program code included in the computer program may be transmitted using any appropriate network medium, including but not limited to: wireless, wired, etc., or any suitable combination of the above.

[0049] According to an embodiment of the present invention, the program code for executing the computer program provided by the embodiment of the present invention can be written by any combination of one or more programming languages, and specifically, these computing programs can be implemented using high-level process and / or object-oriented programming languages. Programming languages ​​include but are not limited to programming languages ​​such as Java, C++, python, C language or similar. The program code can be executed completely on the user computing device, partially on the user device, partially on the remote computing device, or completely on the remote computing device or server. In the case of a remote computing device, the remote computing device can be connected to the user computing device through any type of network, including a local area network or a wide area network, or can be connected to an external computing device.

[0050] The flowcharts and block diagrams in the accompanying drawings illustrate the possible architecture, functions and operations of the systems, methods and computer program products according to various embodiments of the present invention. In this regard, each box in the flowchart or block diagram may represent a module, a program segment, or a part of a code, and the above-mentioned module, program segment, or a part of the code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box may also occur in an order different from that marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flowchart, and the combination of boxes in the block diagram or flowchart, can be implemented with a dedicated hardware-based system that performs the specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions. It can be understood by those skilled in the art that the features recorded in the various embodiments and / or claims of the present invention can be combined and / or combined in various ways, even if such a combination or combination is not explicitly recorded in the present invention. In particular, without departing from the spirit and teaching of the present invention, the features described in the various embodiments and / or claims of the present invention may be combined and / or combined in a variety of ways. All of these combinations and / or combinations fall within the scope of the present invention.

[0051] The embodiments of the present invention are described above. However, these embodiments are only for the purpose of illustration, and are not intended to limit the scope of the present invention. Although the embodiments are described above, this does not mean that the measures in the various embodiments cannot be used in combination. The scope of the present invention is limited by the attached claims and their equivalents. Without departing from the scope of the present invention, those skilled in the art may make various substitutions and modifications, which should all fall within the scope of the present invention.

Claims

1. An authentication method for an operating system, characterized in that: Applied to the operating system, including: The operating system acquires attribute information, and generates a first character string according to the attribute information, wherein the attribute information includes: system information of the operating system and hardware information carrying the operating system; Sending the first character string to an external device; receiving a second character string for authentication returned by the external device, wherein the second character string includes a random character string; According to a preset rule, combining the first character string and the random character string to generate a third character string; If the designated position of the third character string is the same as the designated position of the second character string, the operating system authentication is successful.

2. The authentication and verification method of an operating system according to claim 1, characterized in that: The attribute information is represented in the form of key-value pairs, and the attribute information represented in the form of key-value pairs is connected one by one to form the first character string.

3. The authentication and verification method of an operating system according to claim 1, characterized in that: The second character string and the third character string are encrypted using the same encryption method.

4. The authentication and verification method of an operating system according to claim 1, characterized in that: The system information includes the operating system serial number, system name and kernel version.

5. The authentication and verification method of an operating system according to claim 1, characterized in that: The attribute information includes the network card MAC address and hard disk attributes.

6. The authentication and verification method of an operating system according to claim 1, characterized in that: The sending the first character string to the external device includes: generating a two-dimensional code image according to the first character string, and the external device scanning the two-dimensional code image to obtain the first character string.

7. An authentication method for an operating system, characterized in that: Applied to an external device, the method includes: obtaining a first character string sent by an operating system, and generating a random character string; According to a preset rule, the first character string and the random character string are combined to generate a second character string, and the second character string is sent to the operating system end.

8. An authentication and verification device for an operating system, characterized in that: The device comprises: A first generating module is used for the operating system to obtain attribute information and generate a first character string according to the attribute information, wherein the attribute information includes: system information of the operating system and hardware information carrying the operating system; A sending module, used for sending the first character string to an external device; A receiving module, configured to receive a second character string for authentication returned by the external device, wherein the second character string includes a random character string; A second generating module, configured to combine the first character string and the random character string to generate a third character string according to a preset rule; The authentication verification module is used to verify that the operating system authentication is successful if the designated position of the third character string is the same as the designated position of the second character string.

9. An electronic device, characterized in that: include: one or more processors; A storage device for storing one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors are caused to execute the method according to any one of claims 1 to 6.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the method according to any one of claims 1 to 6 is implemented.

Images