Dynamic two-dimensional password verification method and system with limited authorization function

Abstract

The invention discloses a dynamic two-dimensional password verification method and system with a limited authorization function, and relates to the technical field of information security and passwords. A management subsystem substitutes a system variable value according to a dynamic password formula to generate a first password character string, and then generates a two-dimensional code through the first password character string; then starting a code scanning module button on the verification subsystem, decoding and calculating scanned two-dimensional code information, and restoring the two-dimensional code information into a dynamic password character string which is called a read-in code; a dynamic password generation module on the dynamic password verification subsystem calls a dynamic password formula, a system variable value of the dynamic password formula is substituted into the dynamic password formula for calculation, a second password character string is obtained, and the second password character string serves as a verification code; and then the read-in code is compared with the verification code, so that verification of the dynamic password is completed. And system login and unlocking must be used in a specified period after being authorized, so that the system is more convenient, faster and confidential, and the system security is ensured.

Description

Technical Field

[0001] The present invention relates to the fields of information security and cryptographic technology, and in particular to a dynamic two-dimensional password verification method and system with a time-limited authorization function. Background Art

[0002] With the advent of the information age, people's daily lives are also changing. For example, the original method of locking doors with keys has become a password lock. The door can be opened by simply entering the correct password without using keys, which has brought great convenience to people's lives.

[0003] At the same time, it also brings security risks, such as easy to be peeped at and technically decrypted, and once leaked, it can be continuously opened, allowing people who know the password to enter and exit freely without any restrictions. If bad people or thieves know the password, it will bring great security risks.

[0004] In the prior art, in order to reduce security risks, it is usually necessary to use complex, difficult to remember or crack passwords when setting passwords, but this also increases the difficulty of remembering or even forgetting, which increases the difficulty of setting passwords. Based on this, the applicant filed a patent application for a dynamic password method and control system with application number "202210338609.4".

[0005] However, the dynamic password method and control system have solved the defects of traditional passwords being easily peeped at or obtained through inverse operations, eavesdropping and other methods. However, there are still complex processes such as the human brain memorizing the dynamic password formula, substituting the system variable values ​​into the password formula to calculate the string, and then entering the password, and there are also defects such as being unable to authorize the system or limit its use.

[0006] Based on the above problems in the prior art, the present application proposes a dynamic two-dimensional password verification method and system with a time-limited authorization function. Summary of the invention

[0007] The present invention provides a dynamic two-dimensional password verification method and system with a time-limited authorization function. System login and unlocking must be authorized and used within a specified period. It is more convenient, fast, and confidential, ensuring system security. It is suitable for software system login, smart locks, safes, dynamic encrypted navigation, etc.

[0008] According to one aspect of the present disclosure, a dynamic two-dimensional password verification method with a time-limited authorization function is provided, the method comprising: The dynamic two-dimensional password verification method is applied to a two-dimensional password verification system, which includes: a management subsystem and a dynamic password verification subsystem; The management subsystem sets a dynamic password generation formula according to the known identity identification code of the dynamic password verification subsystem, and stores the formula in the management subsystem and the dynamic password verification subsystem respectively; The management subsystem calls the dynamic password formula corresponding to the dynamic password verification subsystem identity identification code stored in the software system according to the known dynamic password verification subsystem identity identification code; The management subsystem substitutes the system variable value during operation into the dynamic password formula, and obtains the first password character string after calculation according to the formula; The management subsystem calls the QR code generation module to generate a dynamic QR code image from the first password character string; After the dynamic password verification subsystem scans the dynamic two-dimensional code image, the two-dimensional code restoration module on the subsystem is called to convert the dynamic two-dimensional code into a read-in code, wherein the read-in code is in the form of a character string; The dynamic password generation module on the dynamic password verification subsystem calls the dynamic password formula, substitutes the system variable value, and calculates to obtain a second password string, which is used as the verification code; The dynamic password verification subsystem compares the read code and the verification code. If the two are the same, the dynamic password verification subsystem is activated, otherwise the dynamic password verification subsystem cannot be activated; among them, the system variables include real-time time information on the management subsystem and the dynamic password verification subsystem, and the system variables of the management subsystem and the dynamic password verification subsystem are always consistent.

[0009] In a possible implementation, the method further includes: The management subsystem obtains application information for the dynamic password verification subsystem, the application information including: an identity identification code of the dynamic password verification subsystem, and a start and end time of operating the dynamic password verification subsystem; The management subsystem obtains the approval result of the application information, and the approval result is approval or disapproval; When the approval result is approval, the dynamic password formula corresponding to the identity identification code of the dynamic password verification subsystem is called.

[0010] In a possible implementation, the dynamic two-dimensional code is displayed on a display screen of the management subsystem, and the dynamic password verification subsystem scans the dynamic two-dimensional code through a camera.

[0011] In a possible implementation, the management subsystem includes an authorization management subsystem, and the application information for the dynamic password verification subsystem and the approval result of the application information are obtained through the authorization management subsystem.

[0012] In a possible implementation, the dynamic password formula includes a static code segment and a dynamic code segment, or only includes a dynamic code segment, and the dynamic code segments and the static code segments are connected by separators; Static code segments include numbers, letters or special characters, and dynamic code segments include variable characters, constants and operators.

[0013] In a possible implementation, the authorization management subsystem is used to number, store, call, generate dynamic passwords for dynamic password formulas of multiple dynamic password verification subsystems, and approve authorization during application operations; The management subsystem is used to establish identity identification codes for multiple dynamic password verification subsystems, and to establish a one-to-one correspondence between the identity identification codes and dynamic password formulas.

[0014] In a possible implementation, the management subsystem has the function of verifying the dynamic password verification subsystem and correcting the system variables of the dynamic password verification subsystem so that the system variable values ​​of the two remain consistent.

[0015] In a possible implementation, the management subsystem may also directly display the character string password, and the operator inputs the displayed character string password into the verification subsystem for verification.

[0016] According to another aspect of the present disclosure, a dynamic two-dimensional password verification system with a time-limited authorization function is provided, the system is used in the verification method, and the system includes: One or more management subsystems, distributed on computers or mobile terminals, sharing data through the network; one or more dynamic password verification subsystems, which can be pure software systems or software and hardware integrated systems, can complete password verification and system startup in an environment without a network; The management subsystem has the functions of verifying the operation application and authorization management of the dynamic password verification subsystem, setting and storing dynamic password formulas, generating dynamic password strings, and generating dynamic QR code images using dynamic password strings; The dynamic password verification subsystem has the functions of dynamic QR code scanning and character string restoration, character string comparison, and dynamic password verification subsystem activation; The management subsystem is used to apply for and approve the use of the dynamic password verification subsystem. The result of the approval is approval or disapproval. When the approval result is approval, the management subsystem calls the dynamic password formula corresponding to the identity identification code of the dynamic password verification subsystem; The management subsystem substitutes the system variable into the dynamic password formula and performs calculation to obtain a first password character string; The management subsystem calls the QR code generation module to generate a dynamic QR code image from the first password character string; The dynamic password verification subsystem scans the dynamic two-dimensional code image generated by the management subsystem, and calls the two-dimensional code restoration module to convert the dynamic two-dimensional code image into a first password string; the first password string is used as a read-in code; As an alternative solution, the management subsystem displays the first password string on the screen, and the dynamic password verification subsystem reads the first password string into the system as a read-in code; The dynamic password generation module on the dynamic password verification subsystem calls the dynamic password formula on the subsystem, substitutes the system variable value into the dynamic password formula for calculation, and obtains a second password string, and the second password string is used as the verification code; The dynamic password verification subsystem compares the read code and the verification code. If they are the same, the dynamic password verification subsystem is started, otherwise the dynamic password verification subsystem is not started; among them, the system variables include real-time time information, and the system variables of the management subsystem and the dynamic password verification subsystem are always consistent.

[0017] For example, the process of the management subsystem includes the setting stage: setting the dynamic password formula according to the ID of the verification subsystem, the authorization stage: the applicant initiates the application, the application includes the verification subsystem ID, the start and end time, and the matter; the approver conducts the review, and the review result includes approval or disapproval; the verification stage, within the approved time range, the operator operates the subsystem, obtains the dynamic verification QR code of the corresponding ID, and displays it on the screen of the management subsystem. If the approved time range is exceeded, the subsystem cannot be operated.

[0018] The verification subsystem saves its ID number and the corresponding dynamic password formula, scans the QR code on the management subsystem screen, and restores it to a read code; generates a verification code, compares the read code with the verification code, and opens the system if they match, otherwise does not open the system.

[0019] In a possible implementation, the dynamic password verification subsystem does not need a communication network and can independently complete password scanning, restoration and verification.

[0020] In a possible implementation, the dynamic password verification subsystem includes: a pure application software system, a communication system, and a dynamic password lock.

[0021] Compared with the prior art, the present invention has the following beneficial effects: The present invention discloses a dynamic two-dimensional password verification method with a time-limited authorization function. The management subsystem sets a dynamic password generation formula according to the identity identification code of the known dynamic password verification subsystem. The dynamic password formula generates a first password string. The first password string is generated into a two-dimensional code by the two-dimensional code generation module of this subsystem, and displayed on the screen of this subsystem. Then, the code scanning module on the dynamic password verification subsystem is started. The system decodes and calculates the scanned two-dimensional code information and restores it to a dynamic password string, which is called a read-in code. The dynamic password generation module on the dynamic password verification subsystem calls the dynamic password formula, substitutes its system variable value, and calculates to obtain a second password string, which is used as a verification code. Then, the read-in code is compared with the verification code to complete the verification of the dynamic password. The two-dimensional code and dynamic password technologies are combined and multiple sets of software for dynamic password generation and verification of application systems are established, so that the application for system login and unlocking must be authorized and used within the specified period, and it is more convenient, fast, and confidential, ensuring system security. It can be used not only for software systems, but also for hardware dynamic password devices such as smart locks and safes.

[0022] Through the authorization management of multiple dynamic password verification subsystems, the generation of dynamic QR codes, the scanning and verification of dynamic QR codes, etc., the authorization approval of the application system and the management of limited use period are realized. At the same time, the password string is hidden, which more effectively prevents the peeping and leakage of passwords, improves the difficulty of password cracking and the convenience of password login, and enhances the security of the system. The scope of use of dynamic passwords has been expanded, which can replace CA and expand its functions. It can be widely used in software systems such as system login and text encryption. At the same time, it can be used in hardware systems such as smart locks in places where people frequently change in and out, such as anti-theft doors, safes, hotel rooms, and unattended places, which greatly improves the security of systems and places and the convenience of use. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] Figure 1 A flowchart of a dynamic two-dimensional password verification method with a time-limited authorization function according to an embodiment of the present disclosure is shown.

[0024] Figure 2 A block diagram of a dynamic two-dimensional password verification system with a time-limited authorization function according to an embodiment of the present disclosure is shown. DETAILED DESCRIPTION

[0025] Various exemplary embodiments, features and aspects of the present disclosure will be described in detail below with reference to the accompanying drawings. The same reference numerals in the accompanying drawings represent elements with the same or similar functions. Although various aspects of the embodiments are shown in the accompanying drawings, the drawings are not necessarily drawn to scale unless otherwise specified.

[0026] The word “exemplary” is used exclusively herein to mean “serving as an example, example, or illustration.” Any embodiment described herein as “exemplary” is not necessarily to be construed as preferred or advantageous over other embodiments.

[0027] In addition, in order to better illustrate the present disclosure, numerous specific details are given in the following specific embodiments. It should be understood by those skilled in the art that the present disclosure can also be implemented without certain specific details. In some examples, methods, means, components and circuits well known to those skilled in the art are not described in detail in order to highlight the subject matter of the present disclosure.

[0028] According to one aspect of the present disclosure, a dynamic two-dimensional password verification method with a time-limited authorization function is provided, the method comprising: The dynamic two-dimensional password verification method is applied to a two-dimensional password verification system, which includes: a management subsystem and a dynamic password verification subsystem; Among them, the management subsystem is installed on the mobile terminal device used by the system operator to log in, and the dynamic password verification subsystem can be a pure application software system, a communication system, or a dynamic password lock hardware and software integrated system.

[0029] S01, the management subsystem sets a dynamic password generation formula according to the known identity identification code of the dynamic password verification subsystem, and saves it in the management subsystem and the dynamic password verification subsystem respectively; S02, the management subsystem calls the dynamic password formula corresponding to the dynamic password verification subsystem identity identification code stored in the software system according to the known dynamic password verification subsystem identity identification code; S03, the management subsystem substitutes the system variable value during operation into the dynamic password formula, and obtains the first password character string after calculation according to the formula; during the calling and calculation process, the dynamic password formula is in an invisible state.

[0030] S04, the management subsystem calls the QR code generation module to generate a dynamic QR code image from the first password string; because the system variables substituted into the dynamic password formula have dynamic properties, the generated first password string and QR code both have dynamic properties and are different each time; The dynamic QR code is a QR code generated by the subsystem using a dynamic password. The dynamic password changes with the changes in system variables, so the generated QR code also changes constantly. According to the different variables substituted into the dynamic password formula, the generated first password string changes, and it will no longer be valid after a certain period of time.

[0031] S05, after the dynamic password verification subsystem scans the two-dimensional code image, the two-dimensional code restoration module on the subsystem is called to convert the dynamic two-dimensional code into a read-in code, wherein the read-in code is in the form of a character string; For example, align the display screen of a mobile terminal device displaying a dynamic QR code with the QR code scanning device of the dynamic password verification subsystem, click the start button of the device to be turned on, scan the QR code, and read the QR code information.

[0032] S06, the dynamic password generation module on the dynamic password verification subsystem calls the dynamic password formula, substitutes its system variable value into the dynamic password formula stored in the dynamic password verification subsystem, and obtains a second password string after calculation, and the second password string is used as the verification code; The dynamic password generation module refers to software that automatically generates a QR code from a password string generated by a dynamic password, and is installed on a mobile terminal device.

[0033] S07, the dynamic password verification subsystem compares the read code and the verification code. If the two are the same, the dynamic password verification subsystem is turned on, otherwise the dynamic password verification subsystem cannot be turned on; wherein, the system variables include the real-time time information on the management subsystem and the dynamic password verification subsystem, and the system variables of the management subsystem and the dynamic password verification subsystem are always consistent.

[0034] The management software can also have the function of displaying the generated dynamic password string, and the verification system can also have the function of password input. The dynamic password generated by the management software is directly input and compared with the verification code. The verification system is enabled based on whether the comparison results are the same.

[0035] Each time verification is performed, the dynamic password formula of the dynamic password verification subsystem is the same as the dynamic password formula used by the management subsystem.

[0036] In a possible implementation, the method further includes: The management subsystem obtains application information for the dynamic password verification subsystem, the application information including: an identity identification code of the dynamic password verification subsystem, and a start and end time of the dynamic password verification subsystem; The management subsystem obtains the approval result of the application information, and the approval result is disapproval or approval; When the approval result is approval, the dynamic password formula corresponding to the identity identification code of the dynamic password verification subsystem is called.

[0037] For example, an operator uses the management software to submit application information for the verification subsystem, the application information includes: the identity identification code of the verification subsystem, the start and end period of the verification subsystem, and the approval personnel approve the above application, and the approval result is approval or disapproval; When the approval result is approval, the operator uses the management software to call the dynamic password formula corresponding to the identity identification code of the verification subsystem on this software, substitutes the system variable value, and generates a dynamic QR code image through calculation.

[0038] In a possible implementation, the dynamic two-dimensional code is displayed on a display screen of the management subsystem, and the dynamic password verification subsystem scans the dynamic two-dimensional code through a camera.

[0039] In a possible implementation, the management subsystem includes an authorization management subsystem, and the application information for the dynamic password verification subsystem and the approval result of the application information are obtained through the authorization management subsystem.

[0040] For example, the management subsystem in the mobile terminal device first determines whether the dynamic password verification subsystem to be used has been approved and whether it is in use. If it meets the requirements, the corresponding dynamic password formula in the management subsystem is called and substituted into the system variables to calculate and generate a dynamic password string. The dynamic password string is then generated into a QR code and displayed on the screen. If it does not meet the requirements, the management subsystem cannot call the relevant functions.

[0041] In a possible implementation, the dynamic password formula includes a static code segment and a dynamic code segment, or only includes a dynamic code segment, and the dynamic code segments and the static code segments are connected by a separator; for example, the separator is #.

[0042] Static code segments include numbers, letters or special characters, and dynamic code segments include variable characters, constants and operators.

[0043] The variable characters are system variable characters, and the operators include addition, subtraction, multiplication, division, brackets, and evolved operators derived from addition, subtraction, multiplication, and division, such as remainder.

[0044] For example, the dynamic password formula is: , where # is a separator. It can be seen that year+3, month / 3+2 and minute-1 are all dynamic code segments, and f5g is a static code segment. The year, month and day are all variable information. Taking 2021 as an example, 2021 is the system variable value. For example, if the operation time is 14:34 on July 23, 2021, the dynamic password string is: 20244f5g3.

[0045] When setting the dynamic password formula, the position of the static code segment in the dynamic password formula is set according to the importance of the information in the device to be controlled. The static code segment can be set at the front end of the dynamic password formula, or at the end of the dynamic password formula, or in the middle part of the dynamic password formula. The number of dynamic code segments and static code segments in the embodiment of the present invention is determined according to the importance of the information. If the importance of the information is high, the number of dynamic code segments and static code segments is set to be larger to prevent others from deciphering it. As the number of dynamic code segments increases, the complexity of the password increases, and the probability of being deciphered is greatly reduced, which greatly improves the security of the file. In addition, if the importance of the information is medium, the number of dynamic code segments and static code segments is set to a standard number. The standard number in the embodiment of the present invention can be set to 3 or 5 to ensure the security of the file. If the security of the information is low, the number of dynamic code segments and static code segments can be set to be smaller to facilitate memory, thereby improving the convenience of setting the dynamic security formula. For example, if the standard number of dynamic code segments and static code segments is 5, if the importance of the file is higher, 8 dynamic code segments and static code segments are used; if the importance of the file is lower, the number of dynamic code segments and static code segments is set to 3.

[0046] The embodiment of the invention constructs the dynamic code segment through the variable information of the system, so that the formula of the dynamic password is more accurate, which facilitates the verification of the dynamic password and improves the security of the password.

[0047] In a possible implementation, the authorization management subsystem is used to number, store, call, generate dynamic passwords for dynamic password formulas of multiple dynamic password verification subsystems, and approve authorization during the application operation; The management subsystem is used to establish identity identification codes for multiple dynamic password verification subsystems, and to establish a one-to-one correspondence between the identity identification codes and dynamic password formulas.

[0048] The method further includes: linking the management subsystem with the dynamic password verification subsystem, and correcting the system variable value on the dynamic password verification subsystem to keep the system variable value consistent.

[0049] According to another aspect of the present disclosure, a dynamic two-dimensional password verification system with a time-limited authorization function is provided, the system is used in the verification method, and the system includes: One or more management subsystems, distributed on computers or mobile terminals, sharing data through the network; one or more dynamic password verification subsystems, which can be pure software systems or software and hardware integrated systems, can complete password verification and system startup in an environment without a network; The management subsystem has the functions of verifying the operation application and authorization management of the dynamic password verification subsystem, setting and storing dynamic password formulas, generating dynamic password strings, and generating dynamic QR code images using dynamic password strings; The dynamic password verification subsystem has the functions of dynamic QR code scanning and character string restoration, character string comparison, and dynamic password verification subsystem activation; The management subsystem is used to apply for and approve the use of the dynamic password verification subsystem. The result of the approval is approval or disapproval. When the approval result is approval, the management subsystem calls the dynamic password formula corresponding to the identity identification code of the dynamic password verification subsystem; The management subsystem substitutes the system variable into the dynamic password formula and performs calculation to obtain a first password character string; The management subsystem calls the QR code generation module to generate a dynamic QR code image from the first password character string; The dynamic password verification subsystem scans the dynamic two-dimensional code image generated by the management subsystem, and calls the two-dimensional code restoration module to convert the dynamic two-dimensional code image into a first password string; the first password string is used as a read-in code; As an alternative solution, the management subsystem displays the first password string on the screen, and the dynamic password verification subsystem reads the first password string into the system as a read-in code; The QR code restoration module refers to application software that can restore the QR code into a dynamic password string. It is installed on the computer device where the verification subsystem is located and can transmit data to the dynamic password verification subsystem.

[0050] The dynamic password generation module on the dynamic password verification subsystem calls the dynamic password formula on the subsystem, substitutes the system variable value into the dynamic password formula for calculation, and obtains a second password string, and the second password string is used as the verification code; The dynamic password verification subsystem compares the read code and the verification code. If they are the same, the dynamic password verification subsystem is started, otherwise the dynamic password verification subsystem is not started; among them, the system variables include real-time time information, and the system variables of the management subsystem and the dynamic password verification subsystem are always consistent.

[0051] For example, the dynamic password verification subsystem compares the "read code" with the "verification code" as strings. If they are the same, the dynamic password verification subsystem will restart; if they are not the same, the dynamic password verification subsystem will prompt that the password is wrong and interrupt the system.

[0052] The management subsystem establishes index identifiers for the dynamic password verification subsystems respectively. The identifiers of the dynamic password verification subsystems correspond one-to-one to the dynamic password formulas. The users submit applications for specific applications, which include but are not limited to the index identifiers of the specific dynamic password verification subsystems, the start and end time of use, and the verification process can only be carried out after a certain approval process.

[0053] Through the authorization management of multiple dynamic password verification subsystems, the generation of dynamic QR codes, the scanning and verification of dynamic QR codes, etc., the authorization approval of the application system and the management of limited use period are realized. At the same time, the password string is hidden, which more effectively prevents the peeping and leakage of passwords, increases the difficulty of password cracking, improves the convenience of password login, and enhances the security of the system. The scope of use of dynamic passwords has been expanded, and it can be widely used in software systems such as system login and text encryption. At the same time, it can be used in hardware systems such as smart locks in places where people frequently change in and out, such as anti-theft doors, safes, hotel rooms, and unattended places, which greatly improves the security of systems and places and the convenience of use.

[0054] In a possible implementation, the dynamic password verification subsystem does not need a communication network and can independently complete password scanning, restoration and verification.

[0055] In a possible implementation, the dynamic password verification subsystem includes: a pure application software system, a communication system, and a dynamic password lock. It can be used in specific scenarios such as anti-theft door locks, safe locks, various door locks, and cabinet door locks.

[0056] When setting the dynamic password formula, the position of the static code segment in the dynamic password formula is set according to the importance of the information in the device to be controlled. The static code segment can be set at the front end of the dynamic password formula, or at the end of the dynamic password formula, or in the middle part of the dynamic password formula. The number of dynamic code segments and static code segments in the embodiment of the present invention is determined according to the importance of the information. If the importance of the information is high, the number of dynamic code segments and static code segments is set to be larger to prevent others from deciphering it. As the number of dynamic code segments increases, the complexity of the password increases, and the probability of being deciphered is greatly reduced, which greatly improves the security of the file. In addition, if the importance of the information is medium, the number of dynamic code segments and static code segments is set to a standard number. The standard number in the embodiment of the present invention can be set to 3 or 5 to ensure the security of the file. If the security of the information is low, the number of dynamic code segments and static code segments can be set to be smaller to facilitate memory, thereby improving the convenience of setting the dynamic security formula. For example, if the standard number of dynamic code segments and static code segments is 5, if the importance of the file is higher, 8 dynamic code segments and static code segments are used; if the importance of the file is lower, the number of dynamic code segments and static code segments is set to 3.

[0057] For example, by setting the user name information and the dynamic password formula based on the user name information, the dynamic code segment formula in the embodiment of the present invention adopts an operation formula composed of a dynamic code segment, a static code segment and a separator, which makes the dynamic code difficult to crack, and the dynamic password formula is processed by the processing module to form a hidden code, which uniquely corresponds to the dynamic password formula, and the hidden code is stored in the first storage module. The hidden code does not contain an operator and a real-time variable symbol, so as to effectively hide the dynamic password formula, making the dynamic password formula safer, and in practical applications, if the first storage module is cracked or stolen, it cannot be deciphered according to the dynamic password formula in the first storage module, which greatly improves the security of the dynamic password formula. In addition, when it is necessary to verify the string, the processor extracts the dynamic password formula in the first storage module and performs a reverse operation to obtain the set dynamic code segment formula, substitutes the real-time system variable value of the system into the dynamic password formula, and calculates the dynamic password verification string. If the dynamic password verification string is consistent with the string to be verified, the verification is successful, and the processing module issues an instruction to enable the control module to control the corresponding device to open to complete the action indicated by the instruction information.

[0058] Application example: The smart lock of the drone room uses a dynamic QR code password verification system. The implementation example is as follows: Maintenance personnel submit maintenance applications through the management subsystem, including specific equipment rooms and maintenance start and end times; The management personnel examine and approve the application and agree to the application.

[0059] During the approved period, the maintenance personnel selects the approved maintenance room on the mobile app and clicks to generate a dynamic QR code for unlocking the smart lock.

[0060] The management subsystem determines whether the maintenance of the computer room has been approved during the period. If approved, it calls out the dynamic password formula corresponding to the smart lock of the computer room, substitutes the system variables of the management subsystem at that time into the formula and calculates, generates a dynamic QR code after obtaining the password string, and displays it on the screen; if not approved, it prompts and returns. Among them, the system variables can be the real-time year, month, day, hour, minute, second, week, storage space occupancy, number of files or temperature information in the system.

[0061] The maintenance personnel points the mobile phone screen at the scanning camera of the smart lock on the drone room door, automatically starts the scan, and calls the QR code recovery module to generate a password string, called the "read code".

[0062] At the same time, the dynamic password generation software on the smart lock calls the dynamic password formula on the smart lock, and also substitutes the system variables at that time into the formula and calculates to obtain a password string, which is called a "verification code".

[0063] The system on the smart lock compares the "read code" with the "verification code". If they match, the unlocking circuit is activated to open the door lock. Otherwise, it prompts that the password is wrong.

[0064] In this way, the system retains the maintenance application and approval records, and can control the maintenance personnel to enter the unmanned room during the specified period, which is conducive to later responsibility tracing, clarifying responsibilities, and strengthening company management. At the same time, it avoids the use of mechanical locks, which require taking the key first and returning the key after use, thereby improving work efficiency and reducing labor costs.

[0065] This system does not require the smart lock to have a communication network, and can independently complete password scanning, restoration, verification and other tasks. It is suitable for outdoor areas without electricity and communication networks (the smart lock can be driven by batteries, which can be solved by regular charging and battery replacement).

[0066] Similarly, this method can be used in hotel rooms, archives and other places, and can also be applied to logging into software systems.

[0067] The embodiments of the present disclosure have been described above, and the above description is exemplary, not exhaustive, and is not limited to the disclosed embodiments. Many modifications and changes will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the described embodiments. The selection of terms used herein is intended to best explain the principles of the embodiments, practical applications, or technical improvements in the market, or to enable other persons of ordinary skill in the art to understand the embodiments disclosed herein.

Claims

1. A dynamic two-dimensional password verification method with a time-limited authorization function, characterized in that: The method comprises: The dynamic two-dimensional password verification method is applied to a two-dimensional password verification system, which includes: a management subsystem and a dynamic password verification subsystem; The management subsystem sets a dynamic password generation formula according to the known identity identification code of the dynamic password verification subsystem, and stores the formula in the management subsystem and the dynamic password verification subsystem respectively; The management subsystem calls the dynamic password formula corresponding to the dynamic password verification subsystem identity identification code stored in the software subsystem according to the known dynamic password verification subsystem identity identification code; The management subsystem substitutes the system variable value during operation into the dynamic password formula, and obtains the first password character string after calculation according to the formula; The management subsystem calls the QR code generation module to generate a dynamic QR code image from the first password character string; After the dynamic password verification subsystem scans the dynamic two-dimensional code image, the two-dimensional code restoration module on the subsystem is called to convert the dynamic two-dimensional code into a read-in code, wherein the read-in code is in the form of a character string; The dynamic password generation module on the dynamic password verification subsystem calls the dynamic password formula, substitutes the system variable value into it, and obtains the second password string after calculation. The second password string is used as the verification code; The dynamic password verification subsystem compares the read code and the verification code. If the two are the same, the dynamic password verification subsystem is activated, otherwise the dynamic password verification subsystem cannot be activated; among them, the system variables include real-time time information on the management subsystem and the dynamic password verification subsystem.

2. A dynamic two-dimensional password verification method with a time-limited authorization function according to claim 1, characterized in that: The method further comprises: The management subsystem obtains application information for the dynamic password verification subsystem, the application information including: an identity identification code of the dynamic password verification subsystem, and a start and end time of operating the dynamic password verification subsystem; The management subsystem obtains the approval result of the application information, and the approval result is approval or disapproval; When the approval result is approval, the dynamic password formula corresponding to the identity identification code of the dynamic password verification subsystem is called.

3. A dynamic two-dimensional password verification method with a time-limited authorization function according to claim 1, characterized in that: The dynamic two-dimensional code is displayed on the display screen of the management subsystem, and the dynamic password verification subsystem scans the dynamic two-dimensional code through a camera.

4. A dynamic two-dimensional password verification method with a time-limited authorization function according to claim 2, characterized in that: The management subsystem includes an authorization management subsystem, through which application information for the dynamic password verification subsystem and the approval result of the application information are obtained.

5. A dynamic two-dimensional password verification method with a time-limited authorization function according to claim 1, characterized in that: The dynamic password formula includes a static code segment and a dynamic code segment, or only includes a dynamic code segment, and the dynamic code segments and the static code segments are connected by separators; Static code segments include numbers, letters or special characters, and dynamic code segments include variable characters, constants and operators.

6. A dynamic two-dimensional password verification method with a time-limited authorization function according to claim 4, characterized in that: The authorization management subsystem is used to number, store, call, generate dynamic passwords for dynamic password formulas of multiple dynamic password verification subsystems, and approve authorization during the application operation; The management subsystem is used to establish identity identification codes for multiple dynamic password verification subsystems, and to establish a one-to-one correspondence between the identity identification codes and dynamic password formulas.

7. A dynamic two-dimensional password verification method with a time-limited authorization function according to claim 1, characterized in that: The method further includes: linking the management subsystem with the dynamic password verification subsystem, and correcting the system variable value on the dynamic password verification subsystem to keep the system variable value consistent.

8. A dynamic two-dimensional password verification system with a time-limited authorization function, characterized in that: The system is used to execute the verification method according to any one of claims 1 to 7, and the system comprises: One or more management subsystems, distributed on computers or mobile terminals, sharing data through the network; one or more dynamic password verification subsystems, which can be pure software systems or software and hardware integrated systems, can complete password verification and system startup in an environment without a network; The management subsystem has the functions of operation application and authorization management of the dynamic password verification subsystem, dynamic password formula setting and storage, dynamic password string generation, dynamic QR code generation using dynamic password string, and system variable value correction of the dynamic password verification subsystem; The dynamic password verification subsystem has the functions of dynamic QR code scanning and character string restoration, character string comparison, and dynamic password verification subsystem activation; The management subsystem is used to apply for and approve the use of the dynamic password verification subsystem. The result of the approval is approval or disapproval. When the approval result is approval, the management subsystem calls the dynamic password formula corresponding to the identity identification code of the dynamic password verification subsystem; The management subsystem substitutes the system variable into the dynamic password formula and performs calculation to obtain a first password character string; The management subsystem calls the QR code generation module to generate a dynamic QR code image from the first password character string; The dynamic password verification subsystem scans the dynamic two-dimensional code image generated by the management subsystem, and calls the two-dimensional code restoration module to convert the dynamic two-dimensional code image into a first password string; the first password string is used as a read-in code; As an alternative solution, the management subsystem displays the first password string on the screen, and the dynamic password verification subsystem reads the first password string into the system as a read-in code; The dynamic password generation module on the dynamic password verification subsystem calls the dynamic password formula on the subsystem, substitutes the system variable value into the dynamic password formula for calculation, and obtains a second password string, and the second password string is used as the verification code; The dynamic password verification subsystem compares the read code and the verification code. If they are the same, the dynamic password verification subsystem is started, otherwise the dynamic password verification subsystem is not started; among them, the system variables include real-time time information, and the system variables of the management subsystem and the dynamic password verification subsystem are always consistent.

9. A dynamic two-dimensional password verification method and system with a time-limited authorization function according to claim 8, characterized in that: The dynamic password verification subsystem does not require a standing communication network and can independently complete password scanning, restoration and verification.

10. A dynamic two-dimensional password verification method and system with a time-limited authorization function according to claim 8, characterized in that: The dynamic password verification subsystem includes: pure application software system, communication system, and dynamic password lock.

Images