Multi-mode terminal identity authentication method and device, electronic equipment and storage medium

Abstract

The invention discloses a multimode terminal identity authentication method and device, electronic equipment and a storage medium. The method comprises the following steps: acquiring feature information of a target multi-mode terminal in response to an access request of the target multi-mode terminal; wherein the feature information is used for representing the identity of the target multi-mode terminal; generating a first feature recognition element corresponding to the target multi-mode terminal according to the feature information; and matching the first feature recognition element with a second feature recognition element in a preset identity identification information base so as to perform identity authentication on the target multi-mode terminal. By adopting the technical scheme of the embodiment of the invention, the diversified hardware feature information and software feature information are simultaneously adopted for identity authentication, so that the target multi-mode terminal is difficult to counterfeit, and the security of accessing the heterogeneous network by the target multi-mode terminal is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of secure communication, and in particular, to a multi-mode terminal identity authentication method, apparatus, electronic device, and storage medium. Background Art

[0002] A heterogeneous network based on 5G technology is a type of network composed of computers, network devices, and systems produced by different manufacturers, and mostly operates on different protocols to support different functions or applications.

[0003] The heterogeneous network can meet the diverse service requirements of future terminals. In order to be able to access multiple networks simultaneously, a mobile terminal should have interfaces that can access multiple networks, and such a mobile terminal is called a multi-mode terminal. Since a multi-mode terminal can access multiple networks, it will definitely involve switching and logging in between different networks.

[0004] In the prior art, during the login process of a 5G multi-mode terminal, due to the coexistence of multiple wireless terminals and multiple wireless technologies in the heterogeneous network, illegal visitors can focus on attacking the weak links among them, thereby illegally logging in, posing a serious threat to the security of the heterogeneous network. Summary of the Invention

[0005] The present invention provides a multi-mode terminal identity authentication method, apparatus, electronic device, and storage medium to solve the problem of illegal access of multi-mode terminals to heterogeneous networks.

[0006] According to one aspect of the present invention, a multi-mode terminal identity authentication method is provided, including:

[0007] In response to an access request of a target multi-mode terminal, obtaining feature information of the target multi-mode terminal; wherein, the feature information is used to characterize the identity of the target multi-mode terminal;

[0008] Generating a first feature recognition element corresponding to the target multi-mode terminal according to the feature information;

[0009] Matching the first feature recognition element with a second feature recognition element in a preset identity identification information library to authenticate the identity of the target multi-mode terminal.

[0010] According to another aspect of the present invention, a multi-mode terminal identity authentication apparatus is provided, including:

[0011] A multi-mode terminal feature information acquisition module, configured to obtain feature information of the target multi-mode terminal in response to an access request of the target multi-mode terminal; wherein, the feature information is used to characterize the identity of the target multi-mode terminal;

[0012] A feature recognition element generation module, configured to generate a first feature recognition element corresponding to the target multimode terminal according to the feature information;

[0013] A multimode terminal identity authentication module, configured to match the first feature recognition element with a second feature recognition element in a preset identity identification information library to authenticate the identity of the target multimode terminal.

[0014] According to another aspect of the present invention, there is provided an electronic device, where the electronic device includes:

[0015] At least one processor; and

[0016] A memory communicatively connected to the at least one processor; wherein,

[0017] The memory stores a computer program executable by the at least one processor, and when the computer program is executed by the at least one processor, the at least one processor is enabled to execute the multimode terminal identity authentication method according to any embodiment of the present invention.

[0018] According to another aspect of the present invention, there is provided a computer-readable storage medium storing computer instructions for causing a processor to implement the multimode terminal identity authentication method according to any embodiment of the present invention when executed.

[0019] According to another aspect of the present invention, there is provided a computer program product including a computer program that implements the multimode terminal identity authentication method according to any embodiment of the present invention when executed by a processor.

[0020] The technical solution of the embodiment of the present invention obtains the feature information of the target multimode terminal by responding to an access request of the target multimode terminal; wherein, the feature information is used to characterize the identity of the target multimode terminal; generates a first feature recognition element corresponding to the target multimode terminal according to the feature information; and matches the first feature recognition element with a second feature recognition element in a preset identity identification information library to authenticate the identity of the target multimode terminal. By adopting the technical solution of the embodiment of the present invention and using diversified hardware feature information and software feature information for identity authentication at the same time, it is difficult for the target multimode terminal to be forged, thereby improving the security of the target multimode terminal accessing a heterogeneous network. It solves the problem of illegal access of multimode terminals to heterogeneous networks and achieves the beneficial effect of improving the security of the target multimode terminal accessing a heterogeneous network.

[0021] It should be understood that the content described in this section is not intended to identify the key or important features of the embodiments of the present invention, nor is it used to limit the scope of the present invention. Other features of the present invention will become readily understood from the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following will briefly introduce the drawings required for the description of the embodiments. Obviously, the drawings in the following description are only some embodiments of the present invention. For those of ordinary skill in the art, without creative efforts, other drawings can be obtained based on these drawings.

[0023] Figure 1 is a flowchart of a multi-mode terminal identity authentication method provided in Embodiment 1 of the present invention;

[0024] Figure 2 is a flowchart of a multi-mode terminal identity authentication method provided in Embodiment 2 of the present invention;

[0025] Figure 3 is a schematic structural diagram of a multi-mode terminal identity authentication device provided in Embodiment 3 of the present invention;

[0026] Figure 4 is a schematic structural diagram of an electronic device provided in Embodiment 4 of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0027] In order to enable those skilled in the art to better understand the solutions of the present invention, the following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, rather than all, of the embodiments of the present invention. All other embodiments obtained by those of ordinary skill in the art based on the embodiments of the present invention without creative efforts shall fall within the protection scope of the present invention.

[0028] Among them, the acquisition, storage, use, and processing of data in the technical solution of this application all comply with the relevant regulations of laws and regulations. It should be noted that the terms "first", "second", "target", "original", etc. in the description and claims of this invention and the above-mentioned drawings are used to distinguish similar objects, and do not necessarily need to describe a specific order or sequence. It should be understood that such data can be interchanged under appropriate circumstances, so that the embodiments of the present invention described here can be implemented in an order other than those illustrated or described here. In addition, the terms "including", "etc.", and "having" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or device that includes a series of steps or units does not necessarily have to be limited to those steps or units clearly listed, but may include other steps or units not clearly listed or inherent to these processes, methods, products, or devices.

[0029] Embodiment 1

[0030] Figure 1 The flow chart of a multi-mode terminal identity authentication method is provided for Embodiment 1 of the present invention. This embodiment is applicable to the situation of authenticating the identity of a multi-mode terminal when the multi-mode terminal accesses the network. This method can be executed by a multi-mode terminal identity authentication device, which can be implemented in the form of hardware and / or software, and can be configured in any electronic device with network communication functions. As Figure 1 shown, this method includes:

[0031] S110. In response to the access request of the target multi-mode terminal, obtain the feature information of the target multi-mode terminal.

[0032] Among them, a multi-mode terminal may refer to a terminal device that can support multiple communication modes and technical standards. These devices usually have flexible network access capabilities and can seamlessly switch between different networks according to user needs and environmental changes. The multi-mode terminal includes, but is not limited to, a multi-mode handheld terminal, a multi-mode integrated emergency broadcast terminal, and a multi-mode handheld intelligent inspection terminal.

[0033] Among them, the feature information is used to characterize the identity of the target multi-mode terminal. The feature information includes hardware feature information and software feature information. The hardware feature information includes, but is not limited to, voltage fluctuation signals and current fluctuation signals generated when the target heterogeneous terminal is working. The software feature information includes, but is not limited to, software system version, types of communication protocols, and types of firewalls.

[0034] Among them, the hardware feature information of different multi-mode terminals is different. Since the circuit layout and component parameters inside different multi-mode terminals will affect the voltage fluctuation signal and current fluctuation signal when the target heterogeneous terminal works, the hardware feature information of different multi-mode terminals is different. Due to factors such as its own characteristics, function requirements, performance requirements, security level requirements, and the network environment to which the multi-mode terminal belongs, the software system version, communication protocol type, and firewall type of the multi-mode terminal are also different, so the software feature information of different multi-mode terminals is also different.

[0035] In an embodiment of the present invention, in response to an access request of a target multi-mode terminal, the hardware feature information and software feature information of the target multi-mode terminal are obtained to facilitate subsequent identity authentication of the target multi-mode terminal.

[0036] S120. Generate a first feature recognition element corresponding to the target multi-mode terminal according to the feature information.

[0037] Among them, the feature recognition element can refer to the key factors that need to be considered for identity authentication of the target multi-mode terminal. The first feature recognition element is a feature recognition element generated according to the feature information of the target multi-mode terminal; therefore, the first feature recognition element includes a voltage feature recognition element generated according to the voltage fluctuation signal, a current feature recognition element generated according to the current fluctuation signal, and a software feature recognition element generated according to the software feature information.

[0038] S130. Match the first feature recognition element with a second feature recognition element in a preset identity identification information library to authenticate the identity of the target multi-mode terminal.

[0039] Among them, the preset identity identification information library contains a second feature recognition element, and the second feature recognition element refers to the feature recognition element of a multi-mode terminal with a determined legal identity. The first feature recognition element is respectively matched with the second feature recognition element to determine whether the identity of the target multi-mode terminal is legal.

[0040] An embodiment of the present invention provides a multi-mode terminal identity authentication method. By responding to an access request of a target multi-mode terminal, the feature information of the target multi-mode terminal is obtained; among them, the feature information is used to characterize the identity of the target multi-mode terminal; according to the feature information, a first feature recognition element corresponding to the target multi-mode terminal is generated; the first feature recognition element is matched with a second feature recognition element in a preset identity identification information library to authenticate the identity of the target multi-mode terminal. By adopting the technical solution of the embodiment of the present invention and using diversified hardware feature information and software feature information for identity authentication at the same time, it is difficult for the target multi-mode terminal to be forged, thereby improving the security of the target multi-mode terminal accessing a heterogeneous network.

[0041] Example Two

[0042] Figure 2 The figure is a flowchart of a multi-mode terminal identity authentication method provided in Example Two of the present invention. Based on the above embodiments, the embodiments of the present invention further optimize the foregoing embodiments, and the embodiments of the present invention can be combined with various alternative solutions in one or more of the above embodiments. As Figure 2 shown, the method includes:

[0043] S210. In response to an access request of a target multi-mode terminal, obtain feature information of the target multi-mode terminal.

[0044] S220. Generate a first feature recognition element corresponding to the target multi-mode terminal according to the feature information.

[0045] Among them, after determining the feature information of the target multi-mode terminal, generate a first feature recognition element corresponding to the target multi-mode terminal according to the feature information.

[0046] As an optional but non-limiting implementation manner, the generating a first feature recognition element corresponding to the target multi-mode terminal according to the feature information includes, but is not limited to, steps A1-A3:

[0047] Step A1: Generate a voltage fluctuation curve corresponding to the target multi-mode terminal according to the voltage fluctuation signal.

[0048] Step A2: Generate a current fluctuation curve corresponding to the target multi-mode terminal according to the current fluctuation signal.

[0049] Step A3: Generate a software feature directory corresponding to the target multi-mode terminal according to the software feature information.

[0050] Among them, the feature information includes a voltage fluctuation signal, a current fluctuation signal, and software feature information, and the first feature recognition element includes a voltage fluctuation curve, a current fluctuation curve, and a software feature directory. In the embodiments of the present invention, a voltage fluctuation curve, a current fluctuation curve, and a software feature directory are generated according to the voltage fluctuation signal, the current fluctuation signal, and the software feature information. For example, monitor the voltage fluctuation signal when the target multi-mode terminal is working, and generate a voltage fluctuation curve according to the voltage fluctuation signal; monitor the current fluctuation signal when the target multi-mode terminal is working, and generate a current fluctuation curve according to the current fluctuation signal; monitor the software system version, communication protocol type, and firewall type of the target multi-mode terminal, and generate a software feature directory.

[0051] In the embodiments of the present invention, the hardware feature information of the target multi-mode terminal during operation is used to generate a first feature recognition element, reducing the risk of forgery of the multi-mode terminal; at the same time, the software feature information is used to generate a first feature recognition element, further reducing the risk of forgery of the multi-mode terminal.

[0052] S230. Match the first feature recognition element with the second feature recognition elements in the preset identity identification information library respectively to determine the feature recognition result.

[0053] Among them, the second feature recognition element refers to the feature recognition element of a legal multi-mode terminal. The feature recognition result includes but is not limited to successful matching of voltage fluctuation curves, successful matching of current fluctuation curves, successful matching of software system versions, successful matching of communication protocol types, and successful matching of firewall types, or at least one of unsuccessful matching of voltage fluctuation curves, unsuccessful matching of current fluctuation curves, unsuccessful matching of software system versions, unsuccessful matching of communication protocol types, and unsuccessful matching of firewall types.

[0054] S240. If there is at least one case where the first feature recognition element fails to match in the feature recognition result, it is determined that the identity authentication of the target multi-mode terminal fails.

[0055] Among them, if there is at least one case where the first feature recognition element fails to match in the feature recognition result, it is determined that the identity authentication of the target multi-mode terminal fails. For example, if the voltage fluctuation curve matches successfully and the rest of the first feature recognition elements do not match successfully, it is determined that the identity authentication of the target multi-mode terminal fails, and there may be a risk of forgery. At the same time, if only the voltage fluctuation curve fails to match and the rest of the first feature recognition elements match successfully, it is still determined that the identity authentication of the target multi-mode terminal fails.

[0056] S250. If there is no case where the first feature recognition element fails to match in the feature recognition result, it is determined that the identity authentication of the target multi-mode terminal passes.

[0057] Among them, only when all the first feature recognition elements match successfully can it be determined that the identity authentication of the target multi-mode terminal passes.

[0058] As an optional but non-limiting implementation manner, after the identity authentication of the target multi-mode terminal, the method further includes but is not limited to steps B1 - B2:

[0059] Step B1. Under the condition that it is determined that the identity authentication of the target multi-mode terminal fails, mark the target multi-mode terminal and give a warning to the target multi-mode terminal; among them, the warning includes sending alarm information in a preset warning manner, and the preset warning manner includes email warning, text message warning, and in-site communication warning.

[0060] Step B2: Under the condition that the identity authentication of the target multi-mode terminal is passed, send a network access page to the target multi-mode terminal, and access the target network after the password verification is successful.

[0061] Wherein, when it is determined that the identity authentication of the target multi-mode terminal fails, the target multi-mode terminal is marked, and an alarm message is sent to a specific contact method. The ways of sending alarm messages include but are not limited to email warning, SMS warning, and in-site communication warning.

[0062] When it is determined that the identity authentication of the target multi-mode terminal is passed, send a network access page to the target multi-mode terminal. The user logs in and connects by entering an account and a password on the network access page, and after the account and password are entered correctly, access the heterogeneous network successfully.

[0063] In the embodiment of the present invention, a warning is given when the identity authentication of the target multi-mode terminal fails, which can ensure that when an illegal intrusion occurs in the multi-mode terminal, a prompt is sent to the administrator in time, facilitating the timely discovery and handling of risks.

[0064] As an optional but non-limiting implementation manner, the method further includes:

[0065] Under the condition that the identity authentication of the target multi-mode terminal is passed, store the feature information of the target multi-mode terminal in the first whitelist, and under the condition that the number of times the identity authentication of the target multi-mode terminal is passed reaches a preset authentication passing times threshold, store the feature information of the target multi-mode terminal in the second whitelist; wherein, for the target multi-mode terminal in the second whitelist, it can directly access the target network without authentication when accessing the target network.

[0066] Wherein, after the identity authentication of the target multi-mode terminal is passed, store the feature information of the target multi-mode terminal in the first whitelist, and under the condition that the identity authentication of the same target multi-mode terminal is continuously passed multiple times and the passing times reach a certain passing times threshold, the target multi-mode terminal is exempted from authentication and directly accesses the heterogeneous network. The more times the identity authentication of the target heterogeneous terminal is passed, the higher the security level of the target heterogeneous terminal is characterized. After reaching a certain number of times, it can be stored in the second whitelist for authentication-free login. The setting of the whitelist can ensure the access efficiency of multi-mode terminals with a higher security level.

[0067] Optionally, for the target heterogeneous terminal in the second whitelist, when the target heterogeneous terminal accesses the target network, random identity authentication is adopted for identity authentication. Among them, even if the target heterogeneous terminal is already in the second whitelist and is in a state of exemption from authentication, for the access security of the heterogeneous network, it is necessary to adopt random authentication to authenticate the target heterogeneous terminal in the second whitelist. While reducing the number of identity authentications, it can effectively avoid the access risk caused by the forgery of multimode terminals.

[0068] The embodiment of the present invention provides a multimode terminal identity authentication method. Through the comprehensive security authentication of diversified hardware feature information and software feature information, it is difficult for the target multimode terminal to be forged, and the security of the access authentication of the target multimode terminal is improved. When the identity authentication of the target multimode terminal fails, a warning is issued, which can ensure that when an illegal intrusion occurs in the multimode terminal, a prompt is sent to the administrator in time, facilitating the timely discovery of risks and handling. At the same time, by setting up a whitelist, the access efficiency of the target multimode terminal with a higher security level can be ensured.

[0069] Embodiment III

[0070] Figure 3 It is a schematic structural diagram of a multimode terminal identity authentication device provided by Embodiment III of the present invention. As Figure 3 shown, the device includes:

[0071] A multimode terminal feature information acquisition module 310, configured to acquire the feature information of the target multimode terminal in response to an access request of the target multimode terminal; wherein, the feature information is used to characterize the identity of the target multimode terminal;

[0072] A feature recognition element generation module 320, configured to generate a first feature recognition element corresponding to the target multimode terminal according to the feature information;

[0073] A multimode terminal identity authentication module 330, configured to match the first feature recognition element with a second feature recognition element in a preset identity identification information library to authenticate the identity of the target multimode terminal.

[0074] Optionally, the feature information includes hardware feature information and software feature information. The hardware feature information includes voltage fluctuation signals and current fluctuation signals, and the software feature information includes software system version, communication protocol type, and firewall type.

[0075] Optionally, the feature recognition element generation module is specifically configured to:

[0076] Generate a voltage fluctuation curve corresponding to the target multimode terminal according to the voltage fluctuation signal;

[0077] Generate a current fluctuation curve corresponding to the target multi-mode terminal based on the current fluctuation signal;

[0078] Generate a software feature directory corresponding to the target multi-mode terminal based on the software feature information;

[0079] Wherein, the feature information includes a voltage fluctuation signal, a current fluctuation signal, and software feature information, and the first feature recognition elements include a voltage fluctuation curve, a current fluctuation curve, and a software feature directory.

[0080] Optionally, the multi-mode terminal identity authentication module is specifically configured to:

[0081] Match the first feature recognition elements with second feature recognition elements in a preset identity identification information library respectively to determine a feature recognition result; wherein, the second feature recognition elements refer to the feature recognition elements of a legal multi-mode terminal;

[0082] If there is at least one case where the first feature recognition element fails to match in the feature recognition result, it is determined that the identity authentication of the target multi-mode terminal fails;

[0083] If there is no case where the first feature recognition element fails to match in the feature recognition result, it is determined that the identity authentication of the target multi-mode terminal passes.

[0084] Optionally, after the identity authentication of the target multi-mode terminal, the device further includes a target multi-mode terminal access or warning module, which is specifically configured to:

[0085] Under the condition of determining that the identity authentication of the target multi-mode terminal fails, mark the target multi-mode terminal and give a warning to the target multi-mode terminal; wherein, the warning includes sending an alarm message in a preset warning manner, and the preset warning manner includes email warning, SMS warning, and in-site communication warning;

[0086] Under the condition of determining that the identity authentication of the target multi-mode terminal passes, send a network access page to the target multi-mode terminal and access the target network after successful password verification.

[0087] Optionally, the device further includes a whitelist identity management module, which is specifically configured to:

[0088] Under the condition that the identity authentication of the target multi-mode terminal passes, store the feature information of the target multi-mode terminal in a first whitelist, and under the condition that the number of times the identity authentication of the target multi-mode terminal passes reaches a preset authentication pass times threshold, store the feature information of the target multi-mode terminal in a second whitelist; wherein, the target multi-mode terminal in the second whitelist can access the target network directly without authentication when accessing the target network.

[0089] In the embodiments of the present invention, the multi-mode terminal identity authentication device provided can execute the multi-mode terminal identity authentication method provided in any of the above embodiments of the present invention, and has the corresponding functions and beneficial effects for executing the multi-mode terminal identity authentication method. For the detailed process, refer to the related operations of the multi-mode terminal identity authentication method in the foregoing embodiments.

[0090] Embodiment 4

[0091] Figure 4 FIG. shows a schematic structural diagram of an electronic device 10 that can be used to implement the embodiments of the present invention. The electronic device is intended to represent various forms of digital computers, such as, for example, a laptop computer, a desktop computer, a workbench, a personal digital assistant, a server, a blade server, a mainframe computer, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as, for example, a personal digital processor, a cellular phone, a smart phone, a wearable device (such as a helmet, glasses, a watch, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely illustrative and are not intended to limit the implementation of the present invention described and / or claimed herein.

[0092] As Figure 4 shown, the electronic device 10 includes at least one processor 11, and a memory communicatively connected to the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc. Among them, the memory stores a computer program executable by the at least one processor. The processor 11 can execute various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 into the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. The input / output (I / O) interface 15 is also connected to the bus 14.

[0093] A plurality of components in the electronic device 10 are connected to the I / O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a magnetic disk, an optical disk, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0094] The processor 11 may be various general-purpose and / or special-purpose processing components with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various dedicated artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, etc. The processor 11 executes the various methods and processes described above, such as the multi-mode terminal authentication method.

[0095] In particular, according to an embodiment of the present invention, the process described above with reference to the flowchart can be implemented as a computer software program. For example, an embodiment of the present invention includes a computer program product, which includes a computer program carried on a non-transitory computer-readable medium, and the computer program includes program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from the network through the communication unit 19, or installed from the storage unit 18, or installed from the ROM 12. When the computer program is executed by the processor 11, the above functions defined in the method of the embodiment of the present invention are executed.

[0096] In some embodiments, the multi-mode terminal authentication method can be implemented as a computer program, which is tangibly included in a computer-readable storage medium, such as the storage unit 18. In some embodiments, part or all of the computer program can be loaded and / or installed onto the electronic device 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the multi-mode terminal authentication method described above can be executed. Alternatively, in other embodiments, the processor 11 can be configured to execute the multi-mode terminal authentication method by any other suitable means (e.g., by means of firmware).

[0097] The various embodiments of the systems and technologies described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field-programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), application-specific standard products (ASSPs), systems on a chip (SOCs), complex programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments can include: implemented in one or more computer programs, the one or more computer programs can be executed and / or interpreted on a programmable system including at least one programmable processor, the programmable processor can be a dedicated or general-purpose programmable processor, and can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit the data and instructions to the storage system, the at least one input device, and the at least one output device.

[0098] A computer program for implementing the method of the present invention can be written in any combination of one or more programming languages. These computer programs can be provided to a processor of a general purpose computer, a special purpose computer, or other programmable data processing device, such that when the computer programs are executed by the processor, the functions / operations specified in the flowchart and / or block diagram are implemented. The computer programs can be executed entirely on the machine, partly on the machine, as a stand-alone software package partly on the machine and partly on a remote machine, or entirely on the remote machine or server.

[0099] In the context of the present invention, a computer-readable storage medium can be a tangible medium that can contain or store a computer program for use by or in connection with an instruction execution system, apparatus, or device. The computer-readable storage medium can include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination of the foregoing. Alternatively, the computer-readable storage medium can be a machine-readable signal medium. More specific examples of the machine-readable storage medium would include an electrical connection based on one or more wires, a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0100] In order to provide interaction with a user, the systems and techniques described herein can be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or a trackball) by which the user can provide input to the electronic device. Other kinds of devices can also be used to provide interaction with the user; for example, the feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including acoustic input, speech input, or tactile input).

[0101] The systems and techniques described herein can be implemented in a computing system including backend components (e.g., as a data server), or a computing system including middleware components (e.g., an application server), or a computing system including frontend components (e.g., a user computer having a graphical user interface or a web browser through which a user can interact with an implementation of the systems and techniques described herein), or a computing system including any combination of such backend components, middleware components, or frontend components. The components of the system can be interconnected with each other by digital data communication in any form or medium (e.g., a communication network). Examples of communication networks include: local area network (LAN), wide area network (WAN), blockchain network, and the Internet.

[0102] A computing system can include a client and a server. The client and the server are generally remote from each other and typically interact through a communication network. The client-server relationship is created by computer programs running on respective computers and having a client-server relationship with each other. The server can be a cloud server, also known as a cloud computing server or a cloud host, which is a host product in the cloud computing service system, and solves the defects of difficult management and weak business scalability existing in traditional physical hosts and VPS services.

[0103] It should be understood that various forms of the processes shown above can be used, steps can be reordered, added, or deleted. For example, the steps recited in the present invention can be executed in parallel, sequentially, or in a different order, as long as the desired results of the technical solution of the present invention can be achieved, and no limitation is made herein.

[0104] The above specific embodiments do not constitute a limitation on the protection scope of the present invention. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the present invention shall be included within the protection scope of the present invention.

Claims

1. A multi-mode terminal identity authentication method, characterized in that, Including: In response to an access request of a target multimode terminal, obtaining feature information of the target multimode terminal; wherein, the feature information is used to characterize the identity of the target multimode terminal; Generating a first feature recognition element corresponding to the target multimode terminal according to the feature information; Matching the first feature recognition element with a second feature recognition element in a preset identity identification information library to authenticate the identity of the target multimode terminal.

2. The method according to claim 1, wherein The feature information includes hardware feature information and software feature information. The hardware feature information includes voltage fluctuation signals and current fluctuation signals. The software feature information includes software system version, communication protocol type, and firewall type.

3. The method according to claim 1, characterized in that, The generating a first feature recognition element corresponding to the target multimode terminal according to the feature information includes: Generating a voltage fluctuation curve corresponding to the target multimode terminal according to the voltage fluctuation signal; Generating a current fluctuation curve corresponding to the target multimode terminal according to the current fluctuation signal; Generating a software feature directory corresponding to the target multimode terminal according to the software feature information; Wherein, the feature information includes voltage fluctuation signals, current fluctuation signals, and software feature information, and the first feature recognition element includes a voltage fluctuation curve, a current fluctuation curve, and a software feature directory.

4. The method according to claim 1, characterized in that, The matching the first feature recognition element with a second feature recognition element in a preset identity identification information library to authenticate the identity of the target multimode terminal includes: Matching the first feature recognition element with the second feature recognition element in the preset identity identification information library respectively to determine a feature recognition result; wherein, the second feature recognition element refers to the feature recognition element of a legitimate multimode terminal; If there is at least one case where the first feature recognition element fails to match in the feature recognition result, it is determined that the identity authentication of the target multimode terminal fails; If there is no case where the first feature recognition element fails to match in the feature recognition result, it is determined that the identity authentication of the target multimode terminal passes.

5. The method according to claim 1, characterized in that After authenticating the identity of the target multimode terminal, the method further includes: Under the condition of determining that the identity authentication of the target multimode terminal fails, marking the target multimode terminal and giving a warning to the target multimode terminal; wherein, the warning includes sending an alarm message in a preset warning manner, and the preset warning manner includes email warning, SMS warning, and in-site communication warning; Under the condition of determining that the identity authentication of the target multimode terminal passes, sending a network access page to the target multimode terminal and accessing the target network after successful password verification.

6. The method according to claim 5, characterized in that, The method further includes: Under the condition that the identity authentication of the target multimode terminal passes, storing the feature information of the target multimode terminal in a first whitelist, and under the condition that the number of times the identity authentication of the target multimode terminal passes reaches a preset authentication pass times threshold, storing the feature information of the target multimode terminal in a second whitelist; wherein, for the target multimode terminal in the second whitelist, it can access the target network directly without authentication when accessing the target network.

7. A multi-mode terminal identity authentication device, characterized in that, The device includes: A multi-mode terminal feature information acquisition module, which is configured to acquire the feature information of the target multi-mode terminal in response to an access request of the target multi-mode terminal; wherein, the feature information is used to characterize the identity of the target multi-mode terminal; A feature recognition element generation module, which is configured to generate a first feature recognition element corresponding to the target multi-mode terminal according to the feature information; A multi-mode terminal identity authentication module, which is configured to match the first feature recognition element with a second feature recognition element in a preset identity identification information library to authenticate the identity of the target multi-mode terminal.

8. An electronic device, characterized in that, The electronic device includes: At least one processor; and A memory communicatively connected to the at least one processor; wherein, The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the multi-mode terminal identity authentication method according to any one of claims 1-6.

9. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer instructions, and the computer instructions are used to implement the multi-mode terminal identity authentication method according to any one of claims 1-6 when executed by a processor.

10. A computer program product, characterized in that, The computer program product includes a computer program, and the computer program implements the multi-mode terminal identity authentication method according to any one of claims 1-6 when executed by a processor.

Images