A Dynamic Two-Dimensional Password Authentication Method and System with Limited-Term Authorization Function

Abstract

The present invention discloses a dynamic two-dimensional password verification method and system with a time-limited authorization function, which relates to the fields of information security and cryptography. The management subsystem generates a first password string by substituting system variable values into the dynamic password formula, then generates a two-dimensional code from the first password string, and then activates the scanning module button on the verification subsystem to decode and calculate the scanned two-dimensional code information to restore it into a dynamic password string, which is called the read-in code. The dynamic password generation module on the dynamic password verification subsystem calls the dynamic password formula, substitutes its system variable values and calculates to obtain a second password string, and the second password string is used as the verification code. Then, the read-in code is compared with the verification code to complete the verification of the dynamic password. System login and unlocking must be authorized and used within a specified period, which is more convenient, fast and confidential, ensuring system security.

Description

Technical Field

[0001] The present invention relates to the fields of information security and cryptography, and particularly to a dynamic two-dimensional password verification method and system with a time-limited authorization function. Background Art

[0002] With the advent of the information age, people's daily lives have also changed. For example, the original use of a key to lock the door has become a password lock now. As long as the correct password is entered, the door can be opened without using a key, which brings great convenience to people's lives.

[0003] At the same time, it also brings security risks. For example, it is easy to be peeked at or decrypted technically, and once leaked, it can be continuously opened, allowing people who know the password to enter and exit freely without restraint. If a bad person or a thief obtains the password, it will bring great security risks.

[0004] In the prior art, in order to reduce security risks, it is usually necessary to use a complex, difficult-to-remember or crack password when setting the password, but this also increases the difficulty of memory and even causes forgetting, which increases the difficulty of setting the password. Based on this, the applicant filed a patent application for a dynamic password method and control system with the application number "202210338609.4".

[0005] However, the dynamic password method and control system solve the defect that traditional passwords are easy to be peeked at or obtained through reverse operations, eavesdropping, etc., but there are still complex processes such as the human brain memorizing the dynamic password formula, substituting the system variable value into the password formula to calculate the string, and then inputting the password, and there are also defects such as inability to authorize the system and limit the use.

[0006] Based on the above problems in the prior art, the present application proposes a dynamic two-dimensional password verification method and system with a time-limited authorization function. Summary of the Invention

[0007] The present invention provides a dynamic two-dimensional password verification method and system with a time-limited authorization function. System login and unlocking must be authorized and used within a specified period, and it is more convenient, fast, and confidential, ensuring system security, and is applicable to software system login, smart locks, safes, dynamic encryption navigation, etc.

[0008] According to one aspect of the present disclosure, there is provided a dynamic two-dimensional password verification method with a time-limited authorization function, the method comprising:

[0009] The dynamic two-dimensional password verification method is applied to a two-dimensional password verification system, and the two-dimensional password verification system includes: a management subsystem and a dynamic password verification subsystem;

[0010] The management subsystem sets a dynamic password generation formula according to the identity identification code of the dynamic password verification subsystem, and stores it on both the management subsystem and the dynamic password verification subsystem respectively;

[0011] The management subsystem calls the dynamic password formula corresponding to the identity identification code of the dynamic password verification subsystem stored on this software system according to the known identity identification code of the dynamic password verification subsystem;

[0012] The management subsystem substitutes the system variable values during operation into the dynamic password formula, and calculates according to the formula to obtain the first password string;

[0013] The management subsystem calls the two-dimensional code generation module to generate a dynamic two-dimensional code graph with the first password string;

[0014] After the dynamic password verification subsystem scans the dynamic two-dimensional code graph, it calls the two-dimensional code restoration module on this subsystem to convert the dynamic two-dimensional code into a read-in code, where the read-in code is in the form of a string;

[0015] The dynamic password generation module on the dynamic password verification subsystem calls the dynamic password formula, substitutes its system variable values, and calculates to obtain a second password string, and the second password string is used as the verification code;

[0016] The dynamic password verification subsystem compares the read-in code with the verification code. If the two are the same, the dynamic password verification subsystem is started; otherwise, the dynamic password verification subsystem cannot be started; among them, the system variables include the real-time time information on the management subsystem and the dynamic password verification subsystem, and the system variables of the management subsystem and the dynamic password verification subsystem are always kept consistent.

[0017] In a possible implementation manner, the method further includes:

[0018] The management subsystem obtains the application information for the dynamic password verification subsystem, and the application information includes: the identity identification code of the dynamic password verification subsystem, and the start and end times for operating the dynamic password verification subsystem;

[0019] The management subsystem obtains the approval result of the application information, and the approval result is consent or disapproval;

[0020] When the approval result is consent, it calls the dynamic password formula corresponding to the identity identification code of the dynamic password verification subsystem.

[0021] In a possible implementation manner, the dynamic two-dimensional code is displayed on the display screen of the management subsystem, and the dynamic password verification subsystem scans the dynamic two-dimensional code graph through the camera.

[0022] In a possible implementation, the management subsystem includes an authorization management subsystem, and the application information for the dynamic password verification subsystem and the approval result of the application information are obtained through the authorization management subsystem.

[0023] In a possible implementation, the dynamic password formula includes a static code segment and a dynamic code segment, or only includes a dynamic code segment, and the dynamic code segments and between the static code segment and the dynamic code segment are connected by a delimiter;

[0024] The static code segment includes numbers, letters or special characters, and the dynamic code segment includes variable characters, constants and operators.

[0025] In a possible implementation, the authorization management subsystem is used to number, store, call, generate dynamic passwords for the dynamic password formulas of multiple dynamic password verification subsystems, and approve the authorization during the application operation;

[0026] The management subsystem is used to establish an identification code for multiple dynamic password verification subsystems, and establish a one-to-one correspondence between the identification code and the dynamic password formula.

[0027] In a possible implementation, the management subsystem has a verification dynamic password verification subsystem, which has the function of correcting the system variables of the dynamic password verification subsystem to keep the system variable values of the two consistent.

[0028] In a possible implementation, the management subsystem can also directly display a string password, and the operator inputs the displayed string password into the verification subsystem for verification.

[0029] According to another aspect of the present disclosure, a dynamic two-dimensional password verification system with a time-limited authorization function is provided. The system is used for the verification method, and the system includes:

[0030] One or more management subsystems, distributed in a computer or a mobile terminal, sharing data through a network; one or more dynamic password verification subsystems, which can be a pure software system or a software and hardware integration system, and can complete password verification and system startup in a network-free environment;

[0031] The management subsystem has an operation application and authorization management function for verifying the dynamic password verification subsystem, a dynamic password formula setting and storage function, a dynamic password string generation function, and a function of generating a dynamic two-dimensional code graph using the dynamic password string;

[0032] The dynamic password verification subsystem has a dynamic two-dimensional code scanning and restoring string function, a string comparison function, and a dynamic password verification subsystem startup function;

[0033] The management subsystem is used to apply for and approve the use of the dynamic password verification subsystem. The result of the approval is either approval or disapproval. When the approval result is approval, the management subsystem calls the dynamic password formula corresponding to the identification code of the dynamic password verification subsystem.

[0034] The management subsystem substitutes system variables into the dynamic password formula and calculates to obtain a first password string.

[0035] The management subsystem calls the QR code generation module to generate a dynamic QR code graph with the first password string.

[0036] The dynamic password verification subsystem scans the dynamic QR code graph generated by the management subsystem and calls the QR code restoration module to convert the dynamic QR code graph into a first password string. The first password string is used as the read-in code.

[0037] As an alternative, the management subsystem displays the first password string on the screen, and the dynamic password verification subsystem reads the first password string into the system as the read-in code.

[0038] The dynamic password generation module on the dynamic password verification subsystem calls the dynamic password formula on this subsystem, substitutes the system variable values into the dynamic password formula for calculation, and obtains a second password string. The second password string is used as the verification code.

[0039] The dynamic password verification subsystem compares the read-in code with the verification code. If they are the same, it activates the dynamic password verification subsystem; otherwise, it does not activate the dynamic password verification subsystem. Among them, the system variables include real-time time information, and the system variables of the management subsystem and the dynamic password verification subsystem are always kept consistent.

[0040] For example, the process processed by the management subsystem includes a setting stage: setting the dynamic password formula according to the ID of the verification subsystem, an authorization stage: the applicant initiates an application, and the application includes the verification subsystem ID, start and end times, and matters; the approver conducts a review, and the review result includes approval or disapproval; a verification stage, within the approved time range, the operator operates the subsystem to obtain the dynamic verification QR code corresponding to the ID and displays it on the screen of the management subsystem. Beyond the approved time range, the subsystem cannot be operated.

[0041] The verification subsystem stores its ID number and the corresponding dynamic password formula, scans the QR code on the screen of the management subsystem, and restores it to the read-in code; generates the verification code, compares the read-in code with the verification code, and if they match, the system is activated, otherwise the system is not activated.

[0042] In a possible implementation manner, the dynamic password verification subsystem does not need to have a communication network and can independently complete password scanning, restoration, and verification.

[0043] In a possible implementation, the dynamic password verification subsystem includes: a pure application software system, a communication system, and a dynamic password lock.

[0044] Compared with the prior art, the beneficial effects of the present invention are as follows:

[0045] A dynamic two-dimensional password verification method with a time-limited authorization function according to an embodiment of the present disclosure. The management subsystem sets a dynamic password generation formula according to the identity identification code of the known dynamic password verification subsystem. The dynamic password formula generates a first password string. The first password string is generated into a two-dimensional code by the two-dimensional code generation module of this subsystem and displayed on the screen of this subsystem. Then, the scanning module on the dynamic password verification subsystem is started, and the system decodes and calculates the scanned two-dimensional code information to restore it into a dynamic password string, which is called the read-in code. The dynamic password generation module on the dynamic password verification subsystem calls the dynamic password formula, substitutes the system variable values thereof, and performs calculations to obtain a second password string, and the second password string is used as the verification code. Then, the read-in code is compared with the verification code to complete the verification of the dynamic password. By combining the technologies of two-dimensional codes and dynamic passwords and establishing software for separately managing the generation and verification of dynamic passwords in multiple application systems, the application for system login and unlocking must be authorized and used within a specified period, and it is more convenient, fast, and secure, ensuring the system security. It can be used not only for software systems but also for hardware dynamic password devices such as intelligent locks and safes.

[0046] Through methods such as authorization management of multiple dynamic password verification subsystems, generation of dynamic two-dimensional codes, and scanning and verification of dynamic two-dimensional codes, the authorization approval of application systems and the management of limited usage periods are realized. At the same time, the password string is hidden, which more effectively prevents password peeping and leakage, improves the difficulty of password cracking and the convenience of password login, and enhances the system security. The usage range of dynamic passwords is expanded, and it can replace CA and expand its functions. It can be widely applied to software systems such as system login and text encryption, and at the same time can be used in hardware systems such as anti-theft doors, safes, hotel guest rooms, and intelligent locks in places where the entering and leaving personnel often change, greatly improving the security and usage convenience of the system and the place. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] Figure 1 A flowchart showing a dynamic two-dimensional password verification method with a time-limited authorization function according to an embodiment of the present disclosure.

[0048] Figure 2 A block diagram showing a dynamic two-dimensional password verification system with a time-limited authorization function according to an embodiment of the present disclosure. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0049] Various exemplary embodiments, features, and aspects of the present disclosure will be described in detail below with reference to the accompanying drawings. Identical reference numerals in the drawings denote functionally identical or similar elements. Although various aspects of the embodiments are shown in the drawings, the drawings are not necessarily drawn to scale unless otherwise specified.

[0050] As used herein, the term "exemplary" means "serving as an example, embodiment, or illustration." Any embodiment described herein as "exemplary" is not necessarily to be construed as superior to or better than other embodiments.

[0051] In addition, for a better description of the present disclosure, numerous specific details are given in the following detailed implementation. Those skilled in the art should understand that the present disclosure can also be implemented without some specific details. In some instances, methods, means, elements, and circuits well known to those skilled in the art are not described in detail so as to highlight the gist of the present disclosure.

[0052] According to one aspect of the present disclosure, there is provided a dynamic two-dimensional password verification method with a time-limited authorization function, the method comprising:

[0053] The dynamic two-dimensional password verification method is applied to a two-dimensional password verification system, which includes a management subsystem and a dynamic password verification subsystem;

[0054] Among them, the management subsystem is installed on the mobile terminal device used by the system operator when logging in, and the dynamic password verification subsystem can be a pure application software system, a communication system, or a dynamic password lock software and hardware integration system.

[0055] S01, the management subsystem sets a dynamic password generation formula according to the identity identification code of the known dynamic password verification subsystem, and stores it separately on the management subsystem and the dynamic password verification subsystem;

[0056] S02, the management subsystem calls the dynamic password formula corresponding to the identity identification code of the dynamic password verification subsystem stored on the software system according to the known identity identification code of the dynamic password verification subsystem;

[0057] S03, the management subsystem substitutes the system variable value during operation into the dynamic password formula, and obtains a first password string after calculation according to the formula; during the calling and calculation process, the dynamic password formula is in an invisible state.

[0058] S04, the management subsystem calls the two-dimensional code generation module to generate a dynamic two-dimensional code graph of the first password string; because the system variables substituted into the dynamic password formula have dynamic attributes, the generated first password string and two-dimensional code both have dynamic attributes and are different each time;

[0059] A dynamic QR code is a QR code generated by the subsystem using dynamic passwords. The dynamic passwords change as system variables change. Therefore, the generated QR codes also change continuously. Moreover, according to different variables substituted in the dynamic password formula, the first password string generated is different. Additionally, it will become invalid after a certain period of time.

[0060] S05. After the dynamic password verification subsystem scans the QR code image, it calls the QR code restoration module on this subsystem to convert the dynamic QR code into a read-in code, where the read-in code is in the form of a string.

[0061] For example, align the display screen of the mobile terminal device that shows the dynamic QR code with the QR code scanning device of the dynamic password verification subsystem, click the start button of the device to be activated, scan the QR code, and read in the QR code information.

[0062] S06. The dynamic password generation module on the dynamic password verification subsystem calls the dynamic password formula, substitutes its system variable values into the dynamic password formula stored on the dynamic password verification subsystem, and after calculation, obtains a second password string, which is used as the verification code.

[0063] The dynamic password generation module refers to software that automatically generates a password string for the dynamic password and generates a QR code. It is installed on the mobile terminal device.

[0064] S07. The dynamic password verification subsystem compares the read-in code with the verification code. If the two are the same, the dynamic password verification subsystem is activated; otherwise, the dynamic password verification subsystem cannot be activated. Among them, the system variables include the real-time time information on the management subsystem and the dynamic password verification subsystem, and the system variables of the management subsystem and the dynamic password verification subsystem always remain consistent.

[0065] The management software can simultaneously have the function of displaying the generated dynamic password string, and the verification system can simultaneously have the function of password input, directly input the dynamic password generated by the management software, compare it with the verification code, and determine the activation of the verification system according to whether the comparison results are the same.

[0066] Each time verification is performed, the dynamic password formula of the dynamic password verification subsystem is the same as that used by the management subsystem.

[0067] In a possible implementation manner, the method further includes:

[0068] The management subsystem obtains the application information for the dynamic password verification subsystem. The application information includes: the identity identification code of the dynamic password verification subsystem, and the start and end times for activating the dynamic password verification subsystem.

[0069] The management subsystem obtains the approval result of the application information, and the approval result is disapproval or approval;

[0070] When the approval result is approval, the dynamic password formula corresponding to the identity identification code of the dynamic password verification subsystem is called.

[0071] For example, an operator uses the management software to submit application information for the verification subsystem, the application information includes: the identity identification code of the verification subsystem, the start and end period of the verification subsystem, and the approval personnel approve the above application, and the approval result is approval or disapproval;

[0072] When the approval result is approval, the operator uses the management software to call the dynamic password formula corresponding to the identity identification code of the verification subsystem on this software, substitutes the system variable value, and generates a dynamic QR code image through calculation.

[0073] In a possible implementation, the dynamic two-dimensional code is displayed on a display screen of the management subsystem, and the dynamic password verification subsystem scans the dynamic two-dimensional code through a camera.

[0074] In a possible implementation, the management subsystem includes an authorization management subsystem, and the application information for the dynamic password verification subsystem and the approval result of the application information are obtained through the authorization management subsystem.

[0075] For example, the management subsystem in the mobile terminal device first determines whether the dynamic password verification subsystem to be used has been approved and whether it is in use. If it meets the requirements, the corresponding dynamic password formula in the management subsystem is called and substituted into the system variables to calculate and generate a dynamic password string. The dynamic password string is then generated into a QR code and displayed on the screen. If it does not meet the requirements, the management subsystem cannot call the relevant functions.

[0076] In a possible implementation, the dynamic password formula includes a static code segment and a dynamic code segment, or only includes a dynamic code segment, and the dynamic code segments and the static code segments are connected by a separator; for example, the separator is #.

[0077] Static code segments include numbers, letters or special characters, and dynamic code segments include variable characters, constants and operators.

[0078] The variable characters are system variable characters, and the operators include addition, subtraction, multiplication, division, brackets, and evolved operators derived from addition, subtraction, multiplication, and division, such as remainder.

[0079] For example, the dynamic password formula is: , where # is the separator. It can be seen that year + 3, month / 3 + 2, and minute - 1 are all dynamic code segments, and f5g is a static code segment. The year, month, and day in it are all variable information. Taking the year 2021 as an example, 2021 is the system variable value. For example, if the operation time is 14:34 on July 23, 2021, the dynamic password string is: 20244f5g3.

[0080] When setting the dynamic password formula, set the position of the static code segment in the dynamic password formula according to the importance of the information in the device to be controlled. The static code segment can be set at the very front of the dynamic password formula, or at the very end of the dynamic password formula, or in the middle part of the dynamic password formula. The number of dynamic code segments and static code segments in the embodiments of the present invention is determined according to the importance of the information. If the importance of the information is relatively high, then set the number of dynamic code segments and static code segments to be more, to prevent others from deciphering. Since the number of dynamic code segments increases, the complexity of the password increases, and the probability of being deciphered is greatly reduced, which greatly improves the security of the file. In addition, if the importance of the information is medium, then set the number of dynamic code segments and static code segments to the standard number. The standard number in the embodiments of the present invention can be set to 3 or 5 to ensure the security of the file. If the security of the information is relatively low, then the number of dynamic code segments and static code segments can be set to be less, which is convenient for memory and improves the convenience of setting the dynamic security formula. For example, if the standard number of dynamic code segments and static code segments is 5, if the importance of the file is relatively high, then 8 dynamic code segments and static code segments are used. If the importance of the file is relatively low, then the number of dynamic code segments and static code segments is set to 3.

[0081] The embodiments of the present invention construct the dynamic code segments through the variable information of the system, making the formula of the dynamic password more accurate, facilitating the verification of the dynamic password, and improving the security of the password.

[0082] In a possible implementation manner, the authorization management subsystem is used to number, store, call, generate dynamic passwords for the dynamic password formulae of multiple dynamic password verification subsystems, and approve the authorization during the application operation;

[0083] The management subsystem is used to establish identification codes for multiple dynamic password verification subsystems, and establish a one-to-one correspondence between the identification codes and the dynamic password formulae.

[0084] The method further includes: the management subsystem is linked with the dynamic password verification subsystem to correct the system variable values on the dynamic password verification subsystem to keep the system variable values consistent.

[0085] According to another aspect of the present disclosure, there is provided a dynamic two-dimensional password verification system with a time-limited authorization function, which is used for the verification method described above. The system includes:

[0086] One or more management subsystems, distributed on a computer or a mobile terminal, sharing data through a network; one or more dynamic password verification subsystems, which can be a pure software system or a software and hardware integrated system, and can complete password verification and system startup in a network-free environment;

[0087] The management subsystem has the functions of verifying the operation application and authorization management of the dynamic password verification subsystem, setting and storing the dynamic password formula, generating the dynamic password string, and generating the dynamic two-dimensional code graph using the dynamic password string;

[0088] The dynamic password verification subsystem has the functions of scanning and restoring the string of the dynamic two-dimensional code, comparing the strings, and starting the dynamic password verification subsystem;

[0089] The management subsystem is used for applying for and approving the use of the dynamic password verification subsystem. The result of the approval is consent or non-consent. When the approval result is consent, the management subsystem calls the dynamic password formula corresponding to the identification code of the dynamic password verification subsystem;

[0090] The management subsystem substitutes the system variables into the dynamic password formula and calculates to obtain the first password string;

[0091] The management subsystem calls the two-dimensional code generation module to generate a dynamic two-dimensional code graph with the first password string;

[0092] The dynamic password verification subsystem scans the dynamic two-dimensional code graph generated by the management subsystem, and calls the two-dimensional code restoration module to convert the dynamic two-dimensional code graph into the first password string; the first password string is used as the read-in code;

[0093] As an alternative, the management subsystem displays the first password string on the screen, and the dynamic password verification subsystem reads the first password string into the system as the read-in code;

[0094] The two-dimensional code restoration module refers to an application software that can restore the two-dimensional code into a dynamic password string. It is installed on the computer device where the verification subsystem is located and can transmit data to the dynamic password verification subsystem.

[0095] The dynamic password generation module on the dynamic password verification subsystem calls the dynamic password formula on this subsystem, substitutes the system variable value into the dynamic password formula and calculates to obtain the second password string, and the second password string is used as the verification code;

[0096] The dynamic password verification subsystem compares the read-in code with the verification code. If they are the same, the dynamic password verification subsystem is activated; otherwise, it is not. Among them, the system variables include real-time time information, and the system variables of the management subsystem and the dynamic password verification subsystem are always kept consistent.

[0097] For example, the dynamic password verification subsystem compares the "read-in code" with the "verification code" as strings. If they are the same, the dynamic password verification subsystem; if not, the dynamic password verification subsystem prompts a password error and interrupts the system.

[0098] The management subsystem respectively establishes index identifiers for the dynamic password verification subsystem. The identifiers of the dynamic password verification subsystem correspond one by one to the dynamic password formulas. The user submits an application for specific application usage, the content including but not limited to the index identifier of the specific dynamic password verification subsystem, the start and end times of usage, and can only go through the verification process after a certain process approval.

[0099] Through methods such as the authorization management of multiple dynamic password verification subsystems, the generation of dynamic two-dimensional codes, the scanning and verification of dynamic two-dimensional codes, etc., the authorization approval of the application system and the management of the limited usage period are realized. At the same time, the password string is hidden, which more effectively prevents the peeping and leakage of passwords, improves the difficulty of password cracking, improves the convenience of password login, and enhances the security of the system. The usage range of dynamic passwords is expanded and can be widely applied to software systems such as system login and text encryption. At the same time, it can be used in hardware systems such as intelligent locks in places such as anti-theft door locks, safes, hotel guest rooms, and unattended areas where the incoming and outgoing personnel often change, greatly improving the security and usage convenience of the system and the place.

[0100] In a possible implementation, the dynamic password verification subsystem does not need to have a communication network and can independently complete the scanning, restoration, and verification of passwords.

[0101] In a possible implementation, the dynamic password verification subsystem includes: a pure application software system, a communication system, and a dynamic password lock. It can be used in specific scenarios such as anti-theft door locks, safe locks, various door locks, and cabinet locks.

[0102] When setting the dynamic password formula, set the position of the static code segment in the dynamic password formula according to the importance of the information in the device to be controlled. The static code segment can be set at the forefront of the dynamic password formula, or at the end of the dynamic password formula, or in the middle part of the dynamic password formula. In the embodiments of the present invention, the number of dynamic code segments and static code segments is determined according to the importance of the information. If the importance of the information is relatively high, set the number of dynamic code segments and static code segments to be more to prevent others from deciphering. Since the number of dynamic code segments increases, the complexity of the password increases, and the probability of being deciphered is greatly reduced, which greatly improves the security of the file. In addition, if the importance of the information is medium, set the number of dynamic code segments and static code segments to the standard number. The standard number in the embodiments of the present invention can be set to 3 or 5 to ensure the security of the file. If the security of the information is relatively low, the number of dynamic code segments and static code segments can be set to be less for easy memory and to improve the convenience of setting the dynamic security formula. For example, if the standard number of dynamic code segments and static code segments is 5, if the importance of the file is relatively high, 8 dynamic code segments and static code segments are used. If the importance of the file is relatively low, the number of dynamic code segments and static code segments is set to 3.

[0103] For example, by setting the user name information and the dynamic password formula based on the user name information, the dynamic code segment formula in the embodiments of the present invention adopts an operation formula composed of dynamic code segments, static code segments and delimiters. This formula makes the dynamic code not easy to crack, and processes the dynamic password formula through the processing module to form a hidden code. The hidden code uniquely corresponds to the dynamic password formula, and the hidden code is stored in the first storage module. The hidden code does not contain operation symbols and real-time variable symbols, realizing the effective hiding of the dynamic password formula, making the dynamic password formula more secure. And in practical applications, if the first storage module is cracked or stolen, it is also impossible to decipher according to the dynamic password formula in the first storage module, which greatly improves the security of the dynamic password formula. In addition, when string verification is required, the processor extracts the dynamic password formula in the first storage module and performs reverse operation to obtain the set dynamic code segment formula, substitutes the system variable value of the system in real time into the dynamic password formula, and calculates the dynamic password verification string. If the dynamic password verification string is consistent with the to-be-verified string, the verification is successful, and the processing module issues an instruction to make the control module control the corresponding device to open to complete the action referred to by the instruction information.

[0104] Application example: The intelligent lock of the unmanned machine room, and the implementation example of the dynamic two-dimensional code password verification system is as follows:

[0105] The maintenance personnel submit a maintenance application through the management subsystem, and the content includes the specific machine room and the start and end times of the maintenance;

[0106] The management personnel approves the application and agrees to the application matters.

[0107] During the approved period, the maintenance personnel select the approved maintenance machine room on the mobile phone application software and then click to generate a dynamic two-dimensional code for unlocking the intelligent lock.

[0108] The management subsystem determines whether the maintenance of the machine room has been approved during this period. If the approval is agreed, it will retrieve the dynamic password formula corresponding to the intelligent lock of the machine room, substitute the system variables of the management subsystem at that time into the formula and calculate. After obtaining the password string, it will generate a dynamic two-dimensional code and display it on the screen; if the approval is not agreed, it will give a prompt and then return. Among them, the system variables can be the real-time year, month, day, hour, minute, second, week, storage space occupancy, file quantity or temperature information in the system.

[0109] The maintenance personnel aim the mobile phone screen at the scanning camera of the intelligent lock on the unmanned aerial vehicle room door, automatically start the scanning, and call the two-dimensional code restoration module to generate a password string, which is called the "read-in code".

[0110] At the same time, the dynamic password generation software on the intelligent lock calls the dynamic password formula on the intelligent lock, and also substitutes the system variables at that time into the formula and calculates to obtain a password string, which is called the "verification code".

[0111] The system on the intelligent lock compares the "read-in code" with the "verification code". If they match, it will activate the unlocking circuit to open the door lock; otherwise, it will prompt that the password is incorrect.

[0112] In this way, the system retains the maintenance application and approval records, and can also control the maintenance personnel to enter the unmanned aerial vehicle room only during the specified period, which is conducive to the later responsibility traceability, clarifying responsibilities, strengthening company management. At the same time, it avoids the use of mechanical locks, where the key must be taken first and returned after use, improving work efficiency and reducing labor costs.

[0113] This system does not require the intelligent lock to have a communication network and can independently complete tasks such as password scanning, restoration, and verification. It is suitable for areas without electricity and communication networks in the wild (the power for driving the intelligent lock can use batteries, and the batteries can be regularly charged and replaced).

[0114] Similarly, this method can be used in places such as hotel guest rooms and archives, and can also be applied to the login of software systems.

[0115] The embodiments of the present disclosure have been described above. The above description is exemplary and not exhaustive, and is also not limited to the disclosed embodiments. Many modifications and variations are obvious to those of ordinary skill in the art without departing from the scope and spirit of the described embodiments. The choice of terms used herein is intended to best explain the principles of the embodiments, practical applications, or improvements to technologies in the market, or to enable other ordinary skill in the art to understand the embodiments disclosed herein.

Claims

1. A dynamic two-dimensional password verification method with a time-limited authorization function, characterized in that, The method includes: The dynamic two-dimensional password verification method is applied to a two-dimensional password verification system, which includes a management subsystem and a dynamic password verification subsystem; The management subsystem sets a dynamic password generation formula according to the identity identification code of the known dynamic password verification subsystem and stores it on both the management subsystem and the dynamic password verification subsystem; The management subsystem calls the dynamic password formula corresponding to the identity identification code of the dynamic password verification subsystem stored on the software subsystem according to the known identity identification code of the dynamic password verification subsystem; The management subsystem substitutes the system variable values during operation into the dynamic password formula and calculates according to the formula to obtain the first password string; The management subsystem calls the two-dimensional code generation module to generate a dynamic two-dimensional code graph with the first password string; After the dynamic password verification subsystem scans the dynamic two-dimensional code graph, it calls the two-dimensional code restoration module on the subsystem to convert the dynamic two-dimensional code into a read-in code, where the read-in code is in the form of a string; The dynamic password generation module on the dynamic password verification subsystem calls the dynamic password formula, substitutes its system variable values, and calculates to obtain a second password string, which is used as the verification code; The dynamic password verification subsystem compares the read-in code with the verification code. If the two are the same, the dynamic password verification subsystem is started; otherwise, the dynamic password verification subsystem cannot be started; among them, the system variables include the real-time time information on the management subsystem and the dynamic password verification subsystem.

2. The dynamic two-dimensional password verification method with a time-limited authorization function according to claim 1, wherein The method further includes: The management subsystem obtains the application information for the dynamic password verification subsystem, and the application information includes: the identity identification code of the dynamic password verification subsystem, and the start and end times for operating the dynamic password verification subsystem; The management subsystem obtains the approval result of the application information, and the approval result is consent or disapproval; When the approval result is consent, the dynamic password formula corresponding to the identity identification code of the dynamic password verification subsystem is called.

3. The dynamic two-dimensional password verification method with a time-limited authorization function according to claim 1, characterized in that, The dynamic two-dimensional code is displayed on the display screen of the management subsystem, and the dynamic password verification subsystem scans the dynamic two-dimensional code graph through the camera.

4. A dynamic two-dimensional password verification method with a time-limited authorization function according to claim 2, characterized in that, The management subsystem includes an authorization management subsystem, and obtains the application information for the dynamic password verification subsystem and the approval result of the application information through the authorization management subsystem.

5. A dynamic two-dimensional password verification method with a time-limited authorization function according to claim 1, characterized in that The dynamic password formula includes a static code segment and a dynamic code segment, or only includes a dynamic code segment. The dynamic code segments and between the static code segment and the dynamic code segment are connected by delimiters; The static code segment includes numbers, letters or special characters, and the dynamic code segment includes variable characters, constants and operators.

6. A dynamic two-dimensional password verification method with a time-limited authorization function according to claim 4, characterized in that The authorization management subsystem is used to number, store, call, generate dynamic passwords for the dynamic password formulas of multiple dynamic password verification subsystems, and approve the authorization during the application operation period; The management subsystem is used to establish identity identification codes for multiple dynamic password verification subsystems and establish a one-to-one correspondence between the identity identification codes and the dynamic password formulas.

7. A dynamic two-dimensional password verification method with a time-limited authorization function according to claim 1, characterized in that, The method further includes: The management subsystem links with the dynamic password verification subsystem to correct the system variable values on the dynamic password verification subsystem to keep the system variable values consistent.

8. A dynamic two-dimensional password verification system with a time-limited authorization function, characterized in that, The system is used to execute the verification method described in any one of claims 1-7, and the system includes: One or more management subsystems, distributed on a computer or a mobile terminal, sharing data through a network; one or more dynamic password verification subsystems, which can be a pure software system or a software and hardware integrated system, and can complete password verification and system startup in a network-free environment; The management subsystem has the operation application and authorization management function of the dynamic password verification subsystem, the dynamic password formula setting and storage function, the dynamic password string generation function, the function of generating a dynamic two-dimensional code graph using the dynamic password string, and the system variable value correction function for the dynamic password verification subsystem; The dynamic password verification subsystem has the functions of dynamic two-dimensional code scanning and restoring the string, string comparison, and dynamic password verification subsystem startup; The management subsystem is used for applying for and approving the use of the dynamic password verification subsystem, and the result of the approval is consent or non-consent. When the approval result is consent, the management subsystem calls the dynamic password formula corresponding to the identification code of the dynamic password verification subsystem; The management subsystem substitutes the system variables into the dynamic password formula and calculates to obtain a first password string; The management subsystem calls the two-dimensional code generation module to generate a dynamic two-dimensional code graph with the first password string; The dynamic password verification subsystem scans the dynamic two-dimensional code graph generated by the management subsystem, and calls the two-dimensional code restoration module to convert the dynamic two-dimensional code graph into a first password string; the first password string is used as the read-in code; As an alternative, the management subsystem displays the first password string on the screen, and the dynamic password verification subsystem reads the first password string into the system as the read-in code; The dynamic password generation module on the dynamic password verification subsystem calls the dynamic password formula on this subsystem, substitutes the system variable value into the dynamic password formula for calculation, and obtains a second password string, and the second password string is used as the verification code; The dynamic password verification subsystem compares the read-in code and the verification code. If they are the same, it starts the dynamic password verification subsystem; otherwise, it does not start the dynamic password verification subsystem; among them, the system variables include real-time time information, and the system variables of the management subsystem and the dynamic password verification subsystem are always kept consistent.

9. A dynamic two-dimensional password authentication method and system with a time-limited authorization function according to claim 8, characterized in that The dynamic password verification subsystem does not need to always have a communication network and can independently complete password scanning, restoration and verification.

10. A dynamic two-dimensional password verification method and system with a time-limited authorization function according to claim 8, characterized in that The dynamic password verification subsystem includes: a pure application software system, a communication system, and a dynamic password lock.

Images