Visual intercom system and authentication method, device and program product thereof

Abstract

The invention relates to the field of security and protection, in particular to a visual intercom system, an authentication method and device thereof and a program product. The visual intercom system comprises a first device for applying for authentication and a second device for authenticating the first device. The method comprises the following steps: the second device performs registration interaction with the first device according to preset configuration information; after the first device and the second device pass registration, the second device sends a temporary password corresponding to the first device to the first device; and the second equipment receives an authentication request which is sent by the first equipment and comprises the temporary password, and determines the visual intercom authority of the first equipment according to the temporary password. After the password of the entrance machine is modified, the temporary password can be updated only by re-initiating the registration interaction, so that the password configuration is greatly simplified, the password configuration is efficiently completed, and the convenience of authentication operation is improved.

Description

Technical Field

[0001] The present application relates to the field of security, and in particular to a video intercom system and an authentication method, device and program product thereof. Background Art

[0002] Video intercom is a system that integrates audio and video communication functions. The video intercom system allows users to communicate with visitors or other users in real time through video and audio without direct face-to-face communication. This system is usually used in residential areas, office buildings, schools and other places. Since the system can communicate in real time without face-to-face communication, it can effectively increase the safety and convenience of users.

[0003] The video intercom system usually includes a management machine, indoor machine and door machine. When the management machine and indoor machine need to preview the audio and video of the door machine, they usually need to use a password for authentication. If the password of the door machine is changed, the management machine and all indoor machines need to reconfigure the password. For scenes such as residential communities, indoor machines are usually set inside the house, and password configuration is very troublesome, which is not conducive to improving the convenience of authentication operations. Summary of the invention

[0004] In view of this, the embodiments of the present application provide an authentication method, device and program product for a video intercom system to solve the problem in the prior art that the authentication operation is troublesome after the password is modified.

[0005] A first aspect of an embodiment of the present application provides an authentication method for a video intercom system, the video intercom system comprising a first device applying for authentication and a second device authenticating the first device, the method comprising:

[0006] The second device registers and interacts with the first device according to preset configuration information;

[0007] After the first device and the second device are registered, the second device sends a temporary password corresponding to the first device to the first device;

[0008] The second device receives the authentication request including the temporary password sent by the first device, and determines the video intercom authority of the first device according to the temporary password.

[0009] In combination with the first aspect, in a first possible implementation manner of the first aspect, the second device registers and interacts with the first device according to preset configuration information, including:

[0010] The second device performs registration interaction based on the SIP registration protocol with the first device according to the preset configuration information.

[0011] In combination with the first possible implementation manner of the first aspect, in a second possible implementation manner of the first aspect, the first device is a door phone, and the second device is an indoor phone;

[0012] The second device registers and interacts with the first device according to preset configuration information, including:

[0013] The outdoor station receives a first SIP registration request sent by the indoor station;

[0014] When the indoor station needs to be authenticated, the door station sends an unauthorized status code to the indoor station;

[0015] The outdoor station receives a second SIP registration request including preset configuration information sent by the indoor station;

[0016] The outdoor station determines whether the indoor station has passed the registration according to the configuration information;

[0017] After the first device and the second device are registered, the second device sends a temporary password corresponding to the first device to the first device, including:

[0018] After the outdoor station determines that the indoor station has passed the registration according to the configuration information, the outdoor station sends a status code message indicating that the registration has passed to the indoor station, and the status code message carries a temporary password corresponding to the indoor station.

[0019] In combination with the first possible implementation manner of the first aspect, in a third possible implementation manner of the first aspect, the first device is a door phone, and the second device is a management machine;

[0020] The second device registers and interacts with the first device according to preset configuration information, including:

[0021] The door machine sends a third SIP registration request to the management machine;

[0022] The outdoor station receives the unauthorized status code returned by the management machine, and sends a fourth SIP registration request including preset configuration information to the management machine, so that the management machine sends a registration success status code to the outdoor station after determining that the outdoor station has passed the registration according to the configuration information;

[0023] After the first device and the second device are registered, the second device sends a temporary password corresponding to the first device to the first device, including:

[0024] The outdoor station receives a status code indicating that the registration is successful, which is sent by the management station;

[0025] The door machine sends a confirmation message to the management machine, and the confirmation message carries a temporary password corresponding to the management machine.

[0026] In combination with the first aspect, in a fourth possible implementation manner of the first aspect, the second device receives the authentication request sent by the first device and including the temporary password, and determines the video intercom authority of the first device according to the temporary password, including:

[0027] The second device receives the first description request sent by the first device, and returns an unauthenticated status code to the first device when it is determined that the first device has not passed the authentication;

[0028] The second device receives a second description request sent by the first device, where the second description request includes the temporary password, and when verifying that the temporary password is valid, enables the video intercom permission for the first device.

[0029] In combination with any one of the first aspect to the fourth possible implementation manner of the first aspect, in a fifth possible implementation manner of the first aspect, the video intercom system further includes a configuration device;

[0030] Before the second device registers and interacts with the first device according to the preset configuration information, the method further includes:

[0031] The configuration device sends configuration information to the first device and the second device according to the device identifications of the first device and the second device, where the configuration information includes a SIP registration password and a SIP registration ID for SIP registration.

[0032] In combination with the fifth possible implementation manner of the first aspect, in a sixth possible implementation manner of the first aspect, the first device includes an indoor unit, and the second device includes a door unit;

[0033] The configuration device sends configuration information to the first device and the second device according to the device identifiers of the first device and the second device, including:

[0034] The configuration device sends the configuration information to the outdoor station according to the device identification of the outdoor station;

[0035] The outdoor station sends the configuration information to the indoor station according to the device identification of the indoor station.

[0036] A second aspect of an embodiment of the present application provides an authentication device for a video intercom system, the video intercom system comprising a first device for applying for authentication and a second device for authenticating the first device, the device comprising:

[0037] A registration interaction unit, configured for the second device to perform registration interaction with the first device according to preset configuration information;

[0038] a temporary password sending unit, configured to, after the first device and the second device are registered, send the temporary password corresponding to the first device to the first device by the second device;

[0039] The authority determination unit is configured to receive, by the second device, an authentication request including the temporary password sent by the first device, and determine the video intercom authority of the first device according to the temporary password.

[0040] A third aspect of an embodiment of the present application provides a video intercom system, the video intercom system comprising a door station, an indoor station, a management station and a configuration device, wherein:

[0041] The configuration device is used to send configuration information to the outdoor station, the indoor station and the management machine according to the device identifications of the outdoor station, the indoor station and the management machine;

[0042] The outdoor station is used to register and interact with the indoor station and the management station respectively according to the configuration information. After the indoor station passes the registration, the outdoor station sends a temporary password corresponding to the indoor station to the indoor station. After the outdoor station passes the registration, the outdoor station sends a temporary password corresponding to the management station to the management station;

[0043] The indoor unit and the management unit are used to initiate a preview authentication request for the video intercom to the door unit according to the received temporary password, and determine the video intercom authority of the indoor unit and the management unit according to the temporary password.

[0044] A fourth aspect of an embodiment of the present application provides a video intercom system, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, the video intercom system implements the method described in any one of the first aspects.

[0045] In a fifth aspect of the embodiments of the present application, a computer program product is provided, which, when executed on a computer, enables the computer to execute the method in the first aspect or its various implementations.

[0046] A sixth aspect of an embodiment of the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the method described in any one of the first aspects are implemented.

[0047] The seventh aspect of the embodiment of the present application provides a chip for implementing the methods in each implementation of the first aspect. Specifically, the chip includes: a processor for calling and running a computer program from a memory, so that a device equipped with the chip executes the method in the first aspect or its implementation.

[0048] Compared with the prior art, the embodiments of the present application have the following beneficial effects: for the first device and the second device that need to perform authentication operation, the embodiments of the present application perform registration interaction according to the pre-set configuration information. After registration, the second device sends a temporary password to the first device, performs authentication based on the temporary password, and determines the video intercom permission of the first device. Since the temporary password used in the authentication operation can be configured through the registration interaction, after the password of the door machine is changed, it is only necessary to re-initiate the registration interaction to update the temporary password, which greatly simplifies the password configuration and efficiently completes the password configuration, which is conducive to improving the convenience of the authentication operation. BRIEF DESCRIPTION OF THE DRAWINGS

[0049] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0050] Figure 1 It is a structural schematic diagram of a visual intercom system provided in an embodiment of the present application;

[0051] Figure 2 It is a schematic diagram of an implementation flow of an authentication method for a video intercom system provided in an embodiment of the present application;

[0052] Figure 3 It is a schematic diagram of the implementation flow of another authentication method of a video intercom system provided in an embodiment of the present application;

[0053] Figure 4 This is a schematic diagram of an interactive process of an indoor unit performing SIP registration with a door unit provided in an embodiment of the present application;

[0054] Figure 5 This is a schematic diagram of an interactive process of a door machine performing SIP registration with a management machine provided in an embodiment of the present application;

[0055] Figure 6 It is a schematic diagram of an authentication device of a video intercom system provided in an embodiment of the present application;

[0056] Figure 7 It is a schematic diagram of a video intercom system provided in an embodiment of the present application. DETAILED DESCRIPTION

[0057] In the following description, specific details such as specific system structures, technologies, etc. are provided for the purpose of illustration rather than limitation, so as to provide a thorough understanding of the embodiments of the present application. However, it should be clear to those skilled in the art that the present application may also be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, devices, circuits, and methods are omitted to prevent unnecessary details from obstructing the description of the present application.

[0058] In order to illustrate the technical solution described in this application, a specific embodiment is provided below for illustration.

[0059] Video intercom is a system that integrates audio and video communication functions. Video intercom system allows users to communicate with visitors or other users in real time through video and audio without direct face-to-face communication. Video intercom system is usually used in residential areas, office buildings, schools and other places. Since the system does not require face-to-face communication for real-time communication, the other party's information can be confirmed through audio and video before opening the door, which effectively increases the safety of users and realizes remote interactive management, which is conducive to improving the convenience of users.

[0060] The video intercom system usually includes a management station, indoor stations and door stations. When the management station and indoor stations request to preview the audio and video of the door station, they usually need to use a password for authentication. If the password of the door station is changed, the management station and all indoor stations need to reconfigure the password. For scenes such as residential communities, indoor stations are usually set up inside the house, and password configuration is very troublesome, which is not conducive to improving the convenience of authentication operations.

[0061] In order to solve the above problems, the present application embodiment proposes an authentication method for a video intercom system. Figure 1 This is a structural diagram of a video intercom system provided in an embodiment of the present application. In the video intercom system, an indoor unit, an outdoor unit, a management unit and a configuration device are included. The indoor unit is a video intercom device installed in a residential room, the door unit is a video intercom device installed in front of a building, and the management unit is a device for managing the entire video intercom system. Among them:

[0062] The configuration device is used to send configuration information to the outdoor station, indoor station and management station according to the device identification of the outdoor station, indoor station and management station. The configuration information in the configuration device may include the location information, IP, device serial number, SIP (English full name is Session Initiation Protocol, Chinese full name is Session Initiation Protocol) registration password and other information of the device to be configured (outdoor station, indoor station or management station). In order to accurately send the configuration information to the corresponding device, the device identification of the device to be configured can be obtained by scanning the code, and the configuration information can be sent to the device corresponding to the device identification by broadcasting.

[0063] The door phone is used to register and interact with the indoor phone and the management phone respectively according to the configuration information. The door phone can send a registration request to the management phone. After the management phone passes the registration of the door phone, the door phone can send a temporary password corresponding to the management phone to the management phone. In the embodiment of the present application, there are multiple ways to trigger the indoor phone to send a registration request to the door phone. For example, the door phone can send a trigger instruction to the indoor phone to trigger the indoor phone to send a registration request, or the indoor phone can be triggered to send a registration request by a button on the indoor phone, or the indoor phone can be automatically triggered to send a registration request when the indoor phone is powered on and not registered. After the door phone passes the registration of the indoor phone, the door phone can send a temporary password corresponding to the indoor phone to the indoor phone, so that the temporary password can be updated through registration interaction.

[0064] After receiving the updated temporary password, the indoor unit and the management unit can initiate a preview authentication request for the video intercom to the door unit according to the received temporary password, and determine the video intercom authority of the indoor unit and the management unit according to the temporary password.

[0065] Figure 2 A schematic diagram of the interactive process of preview authentication of a video intercom system provided in an embodiment of the present application. The interactive process of preview authentication includes a pre-configuration stage, a configuration delivery stage, a SIP binding stage, and a preview stage. Among them, the pre-configuration stage can also be called the engineering configuration stage, the configuration delivery stage and the SIP binding stage can be called the equipment installation and launch stage, and the preview stage can also be called the equipment use stage. They are introduced and explained below.

[0066] During the pre-configuration phase:

[0067] Before the indoor unit is installed, the configuration device can read the device identification of the indoor unit by scanning the code and record the installation location information of the indoor unit, so that the device identification can be obtained without entering the residence. The installation location information of the indoor unit can include one or more of the phase number of the building where the indoor unit is located, the building number of the building where the indoor unit is located, the unit number and the room number, and the floor number where the indoor unit is located. The device identification of the indoor unit can include the MAC address of the indoor unit.

[0068] The configuration device can read the device identification of the outdoor station and the management station by scanning the code, and can record the installation location information of the outdoor station. For example, the installation location information of the outdoor station may include the period number of the building where the outdoor station is located, the building number of the building where the outdoor station is located, and the unit number of the building where the outdoor station is located, or may also include the type information of the outdoor station such as the host, slave or fence station. The device identification of the management station may include the MAC address of the management station. The device identification of the outdoor station may include the MAC address of the outdoor station.

[0069] The configuration device generates corresponding configuration information according to the location information of the indoor unit or the outdoor unit.

[0070] For example, the configuration information of the outdoor machine may include: issue number, building number, unit number, outdoor machine type (including host, slave and fence machine types), floor number, indoor machine device list corresponding to the outdoor machine (including each indoor machine's IP, issue number, building number, unit number, room number and other information), management machine IP and device serial number, outdoor machine device serial number and SIP registration password and other information or one or more thereof.

[0071] The configuration information of the indoor unit may include: period number, building number, unit number, room number, management machine IP and device serial number, door machine IP and device serial number, SIP registration password, etc. Or it may also include configuration information such as the do not disturb time period of the indoor unit.

[0072] The configuration information of the management machine may include: the management machine device serial number, the outdoor machine device list (including the outdoor machine's IP, issue number, building number, unit number, device serial number and other information), the indoor machine device list (including the indoor machine's IP, issue number, building number, unit number, room number and other information) and the SIP registration password and other information.

[0073] Configuration delivery phase:

[0074] When the device is online for the first time, the configuration device can search for the outdoor station device in the form of a broadcast message. The outdoor station receives the broadcast message and replies according to the device identification in the broadcast message, such as the MAC address in the broadcast message. The configuration device performs IP configuration for the outdoor station and activates the outdoor station according to the configuration information. After the outdoor station is activated, the configuration device sends the configuration information of the outdoor station to the corresponding outdoor station.

[0075] According to a similar configuration delivery method, the configuration information of the management machine, the indoor machine list and the outdoor machine list can be delivered to the management machine.

[0076] In order to reduce the data processing pressure of the configuration device, the activation and configuration delivery of the indoor unit can be completed through the outdoor station. After receiving the indoor unit list sent by the configuration device, the outdoor station can search for indoor unit devices through broadcasting. After the indoor unit responds to the broadcast message with a device identifier such as a MAC address, the outdoor station can perform IP configuration on the indoor unit and activate the indoor unit, and deliver the configuration information to the corresponding indoor unit.

[0077] SIP binding phase:

[0078] After the configuration information is sent, the indoor unit can combine the configuration information into a SIP registration ID. For example, the indoor unit can generate a unique SIP registration ID based on the device type, period number, building number, unit number, room number, floor number, and device number according to the issue number, building number, unit number, etc. in the sent configuration information. Based on the determined SIP registration ID and SIP registration password, the SIP registration process can be initiated to the outdoor station according to the IP of the outdoor station included in the configuration information. If the authentication is correct during the process, the indoor unit can obtain a temporary password.

[0079] Similarly, the outdoor station can generate a unique SIP registration ID for the outdoor station based on the outdoor station's configuration information. Based on the outdoor station's SIP registration ID and the SIP registration password, the SIP registration process can be initiated to the management machine based on the management machine's IP included in the outdoor station's configuration information. If the authentication is correct during this process, the management machine can obtain a temporary password.

[0080] The temporary passwords for the management machine, door machine and indoor machine are all different. One device corresponds to one temporary password, which can effectively prevent password theft.

[0081] Preview stage:

[0082] When the indoor station or management station needs to preview, the indoor station or management station can directly initiate an authentication request to the outdoor station through the temporary password. After the temporary password is verified to be legal, the outdoor station can open the video intercom permission of the indoor station or management station and transmit audio and video data to the outdoor station. The authentication process can be basically the same as the preview process of RTSP (Real-time Streaming Protocol in English and Real-time Streaming Protocol in Chinese). In the second description request, the preview password carried is a temporary password. When the password needs to be changed, the temporary password can be sent to the indoor station and management station again through the registration process, and the temporary password of the outdoor station will also be changed and the validity period will be refreshed. For example, the validity period of the temporary password can be twice the validity period of the SIP registration.

[0083] The temporary password is configured to the indoor station and the management machine through the process of indoor station registering with the door station. When the password needs to be updated, you only need to refresh the SIP registration interaction process, which can effectively reduce the workload of redeployment and improve the password update efficiency and authentication efficiency of the video intercom system.

[0084] Figure 3 The implementation process of an authentication method for a video intercom system provided in an embodiment of the present application is described in detail as follows:

[0085] In S301, the second device registers and interacts with the first device according to preset configuration information.

[0086] Among them, the first device in the embodiment of the present application can be a door machine in the video intercom system, and the second device can be an indoor machine or a management machine in the video intercom system.

[0087] When the first device is an indoor station and the second device is a door station, since the indoor station can be registered under the door station, the indoor station can be triggered to send a registration request to the door station. The registration request can be a registration request based on SIP, and in addition, it can also include a registration request based on other protocols, such as a registration request based on XMPP (Extensible Messaging and Presence Protocol in English, Extensible Message Processing and Presence Protocol in Chinese).

[0088] When the first device is a management machine and the second device is a door machine, since the door machine can be registered under the management machine, the door machine can be triggered to send a registration request to the management machine. Similarly, the registration request can be a registration request based on SIP, and in addition, it can also include a registration request based on other protocols, such as a registration request based on XMPP (Extensible Messaging and Presence Protocol in English, Extensible Message Processing and Presence Protocol in Chinese).

[0089] In the embodiment of the present application, the first device is an indoor unit or a management unit, and the second device is a door unit. Before the first device and the second device register and interact, the configuration information of each device (the first device and the second device) can also be determined by the management device, and the configuration information is sent to each device by broadcasting.

[0090] Before sending the configuration information to each device by broadcasting, the configuration device can also obtain the device identification of the device to be configured by scanning a code or receiving characters, such as the MAC address of the device to be configured, in advance during the initial configuration.

[0091] When sending a broadcast message, the device ID of the device corresponding to the broadcast message may be included. After receiving the broadcast message, the device to be configured determines whether to reply to the broadcast message based on the device ID of the device to be configured and the device ID in the broadcast message. After receiving the device's reply, the IP is configured according to the device's configuration information and the device is activated.

[0092] To improve the distribution efficiency, the activation and configuration delivery of indoor units can be completed through the outdoor station. After receiving the indoor unit list delivered by the configuration device, the outdoor station can search for indoor unit devices through broadcasting. After the indoor unit responds to the broadcast message with a device identifier such as a MAC address, the outdoor station can perform IP configuration on the indoor unit and activate the indoor unit, and deliver the configuration information to the corresponding indoor unit.

[0093] The configuration information of the device in the embodiment of the present application may include the location information of the device, the SIP registration password, the device serial number, etc. For example, the device includes an indoor unit, a door unit, and a management unit.

[0094] The configuration information of the outdoor machine may include: issue number, building number, unit number, outdoor machine type (including host, slave and fence machine types), floor number, indoor machine device list corresponding to the outdoor machine (including each indoor machine's IP, issue number, building number, unit number, room number and other information), management machine IP and device serial number, outdoor machine device serial number and SIP registration password and other information or one or more thereof.

[0095] The configuration information of the indoor unit may include: period number, building number, unit number, room number, management machine IP and device serial number, door machine IP and device serial number, SIP registration password, etc. Or it may also include configuration information such as the do not disturb time period of the indoor unit.

[0096] The configuration information of the management machine may include: the management machine device serial number, the outdoor machine device list (including the outdoor machine's IP, issue number, building number, unit number, device serial number and other information), the indoor machine device list (including the indoor machine's IP, issue number, building number, unit number, room number and other information) and the SIP registration password and other information.

[0097] Based on the determined configuration information, a SIP registration ID can be generated. For example, the indoor unit can generate a unique SIP registration ID based on the equipment type, period, building number, unit number, room number, floor number, and equipment number according to the period number, building number, unit number, etc. in the issued configuration information. Based on the determined SIP registration ID and SIP registration password, the SIP registration process can be initiated to the outdoor station according to the IP of the outdoor station included in the configuration information. If the authentication is correct during the process, the indoor unit can obtain a temporary password.

[0098] Similarly, the outdoor station can generate a unique SIP registration ID for the outdoor station based on the outdoor station's configuration information. Based on the outdoor station's SIP registration ID and the SIP registration password, the SIP registration process can be initiated to the management machine based on the management machine's IP included in the outdoor station's configuration information. If the authentication is correct during this process, the management machine can obtain a temporary password.

[0099] In S302, after the first device and the second device are registered, the second device sends a temporary password corresponding to the first device to the first device.

[0100] When the first device is an indoor station and the second device is a door station, if the indoor station has passed the registration request of the door station through registration interaction, the door station can send temporary passwords corresponding to each indoor station to the indoor station. In other words, the temporary passwords corresponding to each indoor station are different, which can prevent the temporary passwords from being stolen.

[0101] The registration interaction between the indoor station and the outdoor station and the sending of temporary passwords can be as follows: Figure 4 As shown, including:

[0102] 1. The outdoor station receives the first SIP registration request sent by the indoor station.

[0103] The indoor station sends a REGISTER request to the outdoor station to register its presence on the SIP server so that it can receive calls or messages.

[0104] 2. When the indoor station needs to be authenticated, the door station sends an unauthorized status code to the indoor station.

[0105] When the outdoor station receives the REGISTER request, if it finds that the indoor station needs to be authenticated (for example, the indoor station is registering for the first time or the previous session has expired), the outdoor station will return a 401Unauthorized status code. This status code tells the indoor station that it needs to provide authentication information.

[0106] 3. The outdoor station receives the second SIP registration request including preset configuration information sent by the indoor station.

[0107] After receiving the 401 response, the indoor station will send a new REGISTER request according to the requirements of the outdoor station. This request contains authentication information, such as SIP registration ID, SIP registration password, etc.

[0108] 4. The outdoor station determines that the indoor station has passed the registration according to the configuration information, and sends a status code message of passing the registration to the indoor station, wherein the status code message carries a temporary password.

[0109] After receiving the REGISTER request containing authentication information, the outdoor station verifies the SIP registration ID and SIP registration password. If the authentication is successful, the outdoor station generates a 200OK status code message, indicating that the indoor station has been successfully registered. This response carries a temporary password, which is used by the indoor station for preview authentication.

[0110] 5. The indoor station returns a registration status code to the outdoor station.

[0111] After receiving the 200OK response, the indoor station sends an ACK (Acknowledgment) request to confirm the receipt of the response. This ACK request is the final confirmation of the outdoor station, indicating that the indoor station has been successfully registered and is ready to receive calls or messages.

[0112] When the first device is the management machine and the second device is the outdoor machine, if the outdoor machine has accepted the registration request of the management machine through registration interaction, the outdoor machine can send a temporary password corresponding to the management machine to the management machine.

[0113] The registration interaction between the management terminal and the door station and the sending of temporary passwords can be as follows: Figure 5 As shown, including:

[0114] 1. The door machine sends a third SIP registration request to the management machine.

[0115] The outdoor station needs to register itself with the management station so that it can communicate with the indoor station or receive instructions from the management station. The outdoor station sends a REGISTER request to the management station.

[0116] 2. The door machine receives the unauthorized status code returned by the management machine.

[0117] After receiving the REGISTER request, if the management machine finds that the outdoor station needs to be authenticated, it will return a 401 Unauthorized status code and require the outdoor station to provide authentication information.

[0118] 3. The door machine sends a fourth SIP registration request including preset configuration information to the management machine.

[0119] After receiving the 401 response, the outdoor station will send a new REGISTER request, which contains authentication information, such as SIP registration ID and SIP registration password.

[0120] 4. The outdoor station receives the registration status code sent by the management station.

[0121] After the management terminal verifies the authentication information provided by the outdoor station, if the authentication is successful, it returns a response status code of 200OK to the outdoor station, indicating that the outdoor station has been successfully registered.

[0122] 5. The door machine sends a confirmation message to the management machine, and carries the temporary password corresponding to the management machine in the confirmation message.

[0123] According to the returned response status code, the door machine sends a confirmation message to the management machine, and carries a temporary password in the confirmation message. The management machine can be used to perform preview authentication based on the temporary password.

[0124] In S303, the second device receives the authentication request including the temporary password sent by the first device, and determines the video intercom authority of the first device according to the temporary password.

[0125] Since the temporary passwords in the first device, including the indoor unit and the management unit, are all sent by the second device, namely the outdoor unit, the second device can be used to verify the preview authentication sent by the first device and determine whether the temporary password in the authentication request sent by the first device is valid. The preview authentication process can be an interactive process based on RTSP (the full name in English is Real-time Streaming Protocol, and the full name in Chinese is Real-time Streaming Protocol). The first device sends a first description request to the second device, and when the second device finds that the first device needs to be authenticated, it returns an unauthorized status code response message. The first device sends a second description message including the response response information calculated by combining the temporary password and NONCE to the second device. The second device performs authentication verification according to the second description message, and returns 200OK to the first device if the verification passes.

[0126] The temporary password used in the authentication operation in the embodiment of the present application can be configured through a registration interaction. After the password of the door machine is changed, it is only necessary to re-initiate the registration interaction to update the temporary password, which greatly simplifies the password configuration and thus efficiently completes the password configuration, which is conducive to improving the convenience of the authentication operation.

[0127] It should be understood that the size of the device serial number of each step in the above embodiment does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiment of the present application.

[0128] Figure 6 A schematic diagram of an authentication device for a video intercom system provided in an embodiment of the present application, the video intercom system includes a first device for applying for authentication and a second device for authenticating the first device, the device including:

[0129] A registration interaction unit 601, configured for the second device to perform registration interaction with the first device according to preset configuration information;

[0130] A temporary password sending unit 602 is configured to send a temporary password corresponding to the first device to the first device by the second device after the first device and the second device are registered;

[0131] The authority determination unit 603 is configured to receive, by the second device, an authentication request including the temporary password sent by the first device, and determine the video intercom authority of the first device according to the temporary password.

[0132] Figure 6 The authentication device of the video intercom system shown in FIG. Figure 3 The authentication method of the video intercom system shown corresponds to this.

[0133] Figure 7 Schematic diagram of a video intercom system provided in an embodiment of the present application. Figure 7 As shown, the video intercom system 7 of this embodiment includes: a processor 70, a memory 71, and a computer program 72 stored in the memory 71 and executable on the processor 70, such as an authentication program of the video intercom system. When the processor 70 executes the computer program 72, the steps of the above-mentioned authentication method embodiments of the video intercom system are implemented. Alternatively, when the processor 70 executes the computer program 72, the functions of the modules / units in the above-mentioned device embodiments are implemented.

[0134] Exemplarily, the computer program 72 may be divided into one or more modules / units, which are stored in the memory 71 and executed by the processor 70 to complete the present application. The one or more modules / units may be a series of computer program instruction segments capable of completing specific functions, which are used to describe the execution process of the computer program 72 in the video intercom system 7.

[0135] The video intercom system may include, but is not limited to, a processor 70 and a memory 71. Those skilled in the art will appreciate that Figure 7 It is only an example of the video intercom system 7 and does not constitute a limitation of the video intercom system 7. It may include more or fewer components than shown in the figure, or a combination of certain components, or different components. For example, the video intercom system may also include input and output devices, network access devices, buses, etc.

[0136] The processor 70 may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor, etc.

[0137] The memory 71 may be an internal storage unit of the video intercom system 7, such as a hard disk or memory of the video intercom system 7. The memory 71 may also be an external storage device of the video intercom system 7, such as a plug-in hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, etc. equipped on the video intercom system 7. Further, the memory 71 may also include both an internal storage unit and an external storage device of the video intercom system 7. The memory 71 is used to store the computer program and other programs and data required by the video intercom system. The memory 71 may also be used to temporarily store data that has been output or is to be output.

[0138] The technicians in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional units and modules is used as an example for illustration. In practical applications, the above-mentioned function allocation can be completed by different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above. The functional units and modules in the embodiment can be integrated in a processing unit, or each unit can exist physically separately, or two or more units can be integrated in one unit. The above-mentioned integrated unit can be implemented in the form of hardware or in the form of software functional units. In addition, the specific names of the functional units and modules are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of this application. The specific working process of the units and modules in the above-mentioned system can refer to the corresponding process in the aforementioned method embodiment, which will not be repeated here.

[0139] In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described or recorded in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0140] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0141] In the embodiments provided in the present application, it should be understood that the disclosed devices / terminal equipment and methods can be implemented in other ways. For example, the device / terminal equipment embodiments described above are only schematic. For example, the division of the modules or units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0142] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0143] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0144] If the integrated module / unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the present application implements all or part of the process in the above-mentioned embodiment method, and can also be completed by hardware related to computer program instructions. The computer program can be stored in a computer-readable storage medium, and the computer program can implement the steps of the above-mentioned various method embodiments when executed by the processor. Among them, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form. The computer-readable medium may include: any entity or device capable of carrying the computer program code, recording medium, U disk, mobile hard disk, disk, optical disk, computer memory, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), electric carrier signal, telecommunication signal and software distribution medium. It should be noted that the content contained in the computer-readable medium can be appropriately increased or decreased according to the requirements of legislation and patent practice in the jurisdiction. For example, in some jurisdictions, according to legislation and patent practice, computer-readable media do not include electric carrier signals and telecommunication signals.

[0145] In addition, an embodiment of the present application also provides a computer program product, which, when executed on a computer, enables the computer to execute the methods in the above-mentioned implementation modes.

[0146] The embodiments described above are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, a person skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. Such modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application, and should all be included in the protection scope of the present application.

Claims

1. An authentication method for a video intercom system, characterized in that: The video intercom system includes a first device for applying for authentication and a second device for authenticating the first device, and the method includes: The second device registers and interacts with the first device according to preset configuration information; After the first device and the second device are registered, the second device sends a temporary password corresponding to the first device to the first device; The second device receives the authentication request including the temporary password sent by the first device, and determines the video intercom authority of the first device according to the temporary password.

2. The method according to claim 1, characterized in that The second device registers and interacts with the first device according to preset configuration information, including: The second device performs registration interaction based on the SIP registration protocol with the first device according to the preset configuration information.

3. The method according to claim 2, characterized in that The first device is a door station, and the second device is an indoor station; The second device registers and interacts with the first device according to preset configuration information, including: The outdoor station receives a first SIP registration request sent by the indoor station; When the indoor station needs to be authenticated, the door station sends an unauthorized status code to the indoor station; The outdoor station receives a second SIP registration request including preset configuration information sent by the indoor station; The outdoor station determines whether the indoor station has passed the registration according to the configuration information; After the first device and the second device are registered, the second device sends a temporary password corresponding to the first device to the first device, including: After the outdoor station determines that the indoor station has passed the registration according to the configuration information, the outdoor station sends a status code message indicating that the registration has passed to the indoor station, and the status code message carries a temporary password corresponding to the indoor station.

4. The method according to claim 2, characterized in that: The first device is a door phone, and the second device is a management machine; The second device registers and interacts with the first device according to preset configuration information, including: The door machine sends a third SIP registration request to the management machine; The outdoor station receives the unauthorized status code returned by the management machine, and sends a fourth SIP registration request including preset configuration information to the management machine, so that the management machine sends a registration success status code to the outdoor station after determining that the outdoor station has passed the registration according to the configuration information; After the first device and the second device are registered, the second device sends a temporary password corresponding to the first device to the first device, including: The outdoor station receives a status code indicating that the registration is successful, which is sent by the management station; The door machine sends a confirmation message to the management machine, and the confirmation message carries a temporary password corresponding to the management machine.

5. The method according to claim 1, characterized in that: The second device receives the authentication request including the temporary password sent by the first device, and determines the video intercom authority of the first device according to the temporary password, including: The second device receives the first description request sent by the first device, and returns an unauthenticated status code to the first device when it is determined that the first device has not passed the authentication; The second device receives a second description request sent by the first device, where the second description request includes the temporary password, and when verifying that the temporary password is valid, enables the video intercom permission for the first device.

6. The method according to any one of claims 1 to 5, characterized in that: The video intercom system also includes a configuration device; Before the second device registers and interacts with the first device according to the preset configuration information, the method further includes: The configuration device sends configuration information to the first device and the second device according to the device identifications of the first device and the second device, where the configuration information includes a SIP registration password and a SIP registration ID for SIP registration.

7. The method according to claim 6, characterized in that The first device includes an indoor unit, and the second device includes a door unit; The configuration device sends configuration information to the first device and the second device according to the device identifiers of the first device and the second device, including: The configuration device sends the configuration information to the outdoor station according to the device identification of the outdoor station; The outdoor station sends the configuration information to the indoor station according to the device identification of the indoor station.

8. An authentication device for a video intercom system, characterized in that: The video intercom system includes a first device for applying for authentication and a second device for authenticating the first device, and the device includes: A registration interaction unit, configured for the second device to perform registration interaction with the first device according to preset configuration information; a temporary password sending unit, configured to, after the first device and the second device are registered, send the temporary password corresponding to the first device to the first device by the second device; The authority determination unit is configured to receive, by the second device, an authentication request including the temporary password sent by the first device, and determine the video intercom authority of the first device according to the temporary password.

9. A video intercom system, characterized in that: The video intercom system includes a door station, an indoor station, a management station and configuration equipment, wherein: The configuration device is used to send configuration information to the outdoor station, the indoor station and the management machine according to the device identifications of the outdoor station, the indoor station and the management machine; The outdoor station is used to register and interact with the indoor station and the management station respectively according to the configuration information. After the indoor station passes the registration, the outdoor station sends a temporary password corresponding to the indoor station to the indoor station. After the outdoor station passes the registration, the outdoor station sends a temporary password corresponding to the management station to the management station; The indoor unit and the management unit are used to initiate a preview authentication request for the video intercom to the door unit according to the received temporary password, and determine the video intercom authority of the indoor unit and the management unit according to the temporary password.

10. A computer program product comprising computer program instructions, characterized in that When the computer program is executed, the method according to any one of claims 1 to 7 is performed.

Images