Verification method of bidirectional authentication equipment, storage medium, equipment and cloud server
The method for dual authentication devices in smart home applications addresses duplicate ID issues by verifying device IDs against cloud-stored module IDs, ensuring unique identification and reducing maintenance costs.
Patent Information
- Application Number
- CN202510544501.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-04-28
- Publication Date
- 2025-07-15
AI Technical Summary
In the prior art, the device ID of the two-way certified device is prone to repeated burning, resulting in device ID conflicts, causing security and operational confusion, and increasing maintenance costs.
When the two-way authentication device is started, by obtaining the device identification information, requesting the module identification information from the cloud server, and comparing it with the pre-stored module identification information, determining whether the device identification information is abnormal, and generating an abnormal prompt.
Timely discover abnormal equipment identification information, avoid equipment miscontrol, reduce after-sales maintenance needs, reduce manufacturer's after-sales service costs, and improve equipment safety and user experience.
Smart Images

Figure CN120321145A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of smart home, and more specifically, to a verification method, storage medium, device and cloud server for a two-way authentication device. Background Art
[0002] A two-way authentication device is a device that uses two-way authentication technology to enhance communication security. This technology involves the exchange and verification of two-way certificates between the server and the client to ensure that the identities of both parties in the communication are authentic. The main function of a two-way authentication device is to provide confidentiality and integrity of data transmission through certificate verification to prevent unauthorized access and data leakage.
[0003] In actual applications, two-way authentication devices used in the smart home field, such as cameras, smart door locks or smart lighting, need to build a secure communication channel after completing the identity verification of both parties in communication in order to achieve the secure transmission of interactive instructions between the two parties in communication. In actual application scenarios, the two parties in communication can be a two-way authentication device and a mobile app, and the device license (license) that comes with the two-way authentication device is used as an identifier to verify the identity of both parties in communication. Among them, in the production process of the two-way authentication device, the device license (license) is usually burned or installed in the two-way authentication device in a physical form, which cannot be easily changed.
[0004] However, the device license certificates of two-way authentication devices often have the problem of repeated burning during the production process, which may result in multiple devices having the same device ID, which in turn causes confusion in security and operation. For example, when a user is operating his own device, he may inadvertently control other devices with the same device ID. Currently, device ID conflicts can only be discovered during user use, and users need to return the device to the manufacturer through after-sales service to re-burn a new device ID to resolve it, but this solution will also lead to an increase in equipment maintenance costs.
[0005] Accordingly, a new solution is needed in the art to solve the above problems. Summary of the invention
[0006] The present application aims to solve the above technical problem, namely, how to avoid the problem of easy duplication of device ID of two-way authentication devices in the prior art.
[0007] In a first aspect, a verification method for a two-way authentication device is provided, the method being applied to a two-way authentication device, the two-way authentication device being communicatively connected to a cloud server, comprising:
[0008] In response to the device startup instruction, acquiring device identification information, the device identification information being a unique identification of the two-way authentication device;
[0009] Send a module identifier acquisition request to the cloud server according to the device identifier information;
[0010] Obtain at least one first module identifier information corresponding to the device identifier information returned by the cloud server to the two-way authentication device according to the module identifier acquisition request; the first module identifier information is identifier information that is pre-stored in the cloud server and is used to identify the communication connection method of the two-way authentication device;
[0011] Verify whether the device identifier information is abnormal according to the first module identifier information.
[0012] In a technical solution of the above verification method for a two-way authentication device, the verification of whether the device identifier information is abnormal includes:
[0013] Obtain at least one second module identifier information that is pre-set for the two-way authentication device, where the second module identifier information is identifier information that is pre-stored in the two-way authentication device and is used to identify the communication connection method of the two-way authentication device;
[0014] Verify whether the device identifier information is abnormal according to the second module identifier information and the first module identifier information.
[0015] In a technical solution of the above verification method for a two-way authentication device, the verification of whether the device identifier information is abnormal according to the second module identifier information and the first module identifier information includes:
[0016] Judge whether the first module identifier information belongs to the two-way authentication device according to the second module identifier information;
[0017] If it belongs, determine that the verification of the device identifier information is successful;
[0018] If it does not belong, determine that the verification of the device identifier information fails, and generate a device identifier information abnormality prompt.
[0019] In a technical solution of the above verification method for a two-way authentication device, the judgment of whether the first module identifier information belongs to the two-way authentication device according to the second module identifier information includes:
[0020] Judge whether there is a first module identifier information in the at least one first module identifier information that is different from any of the second module identifier information;
[0021] If not, determine that the first module identifier information belongs to the two-way authentication device;
[0022] If it exists, determine that the first module identification information does not belong to the two-way authentication device.
[0023] In a technical solution of the above verification method of the two-way authentication device, the sending the module identification acquisition request to the cloud server includes:
[0024] Based on the encryption algorithm, send the encrypted module identification acquisition request to the cloud server.
[0025] In a second aspect, a verification method of a two-way authentication device is provided. The method is applied to a cloud server, and the cloud server is communicatively connected to the two-way authentication device; the method includes:
[0026] In response to the module identification acquisition request sent by the two-way authentication device, obtain at least one first module identification information corresponding to the device identification information of the two-way authentication device. The module identification acquisition request is a request generated by the two-way authentication device according to the device identification information; the first module identification information is identification information pre-stored in the cloud server for identifying the communication connection mode of the two-way authentication device;
[0027] Send the obtained at least one first module identification information to the two-way authentication device, so that the two-way authentication device verifies whether the device identification information is abnormal according to the first module identification information.
[0028] In a technical solution of the above verification method of the two-way authentication device, obtaining at least one first module identification information corresponding to the device identification information of the two-way authentication device includes:
[0029] Query according to the device identification information in the association data table of the cloud server to obtain at least one first module identification information corresponding to the device identification information;
[0030] Wherein, the association data table is used to store the association relationship between the device identification information of at least one two-way authentication device and the first module identification information; and / or,
[0031] The sending the obtained at least one first module identification information to the two-way authentication device includes:
[0032] Based on the encryption algorithm, send the encrypted at least one first module identification information to the two-way authentication device.
[0033] In a third aspect, a computer-readable storage medium is provided. The computer-readable storage medium includes a stored program. Wherein, when the program runs, it executes the verification method of the two-way authentication device according to any one of the above first aspect or second aspect.
[0034] In a fourth aspect, a two-way authentication device is provided, including a memory and a processor. A computer program is stored in the memory, and the processor is configured to execute the verification method of the two-way authentication device according to any one of the technical solutions in the first aspect through the computer program.
[0035] In a fifth aspect, a cloud server is provided, including a memory and a processor. A computer program is stored in the memory, and the processor is configured to execute the verification method of the two-way authentication device according to any one of the technical solutions in the second aspect through the computer program.
[0036] One or more of the above technical solutions of the present application have at least one or more of the following beneficial effects:
[0037] In the case of adopting the above technical solution, the present application provides a verification method for a two-way authentication device, which is applied to the two-way authentication device and includes: in response to a device startup instruction, obtaining device identification information, sending a module identification acquisition request to the cloud server according to the device identification information, obtaining the module identification information corresponding to the device identification information returned by the cloud server according to the module identification acquisition request, and verifying whether the device identification information is abnormal according to the module identification information. Through the above configuration method, the present application obtains device identification information when the two-way authentication device starts up, so as to be able to obtain at least one first module identification information corresponding to the device identification information in the cloud server. Since the first module identification information is the identification information for identifying the communication connection method of the two-way authentication device, it should theoretically be consistent with the module identification information of the present two-way authentication device. Therefore, it is possible to judge whether the device identification information of the two-way authentication device is abnormal through the first module identification information, so as to timely discover the abnormal situation of the device identification information, and further avoid the problem of incorrect device control caused by the repetition of the device identification information of multiple two-way authentication devices, thereby reducing the after-sales maintenance requirements of users and reducing the after-sales service cost of device manufacturers.
[0038] Moreover, an abnormal device identification information prompt can be generated when it is verified that the device identification information of the two-way authentication device is abnormal, improving the abnormal handling mechanism when the device identification information of the two-way authentication device conflicts, and can timely prompt the user to prevent incorrect operations or privacy leaks during subsequent business operations on the two-way authentication device. Description of the Drawings
[0039] The drawings here are incorporated into the specification and form a part of this specification, showing embodiments consistent with the present application, and are used together with the specification to explain the principles of the present application.
[0040] To more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the drawings required for the description of the embodiments or the prior art. Obviously, for those of ordinary skill in the art, without creative efforts, other drawings can also be obtained based on these drawings.
[0041] Figure 1 FIG. is a schematic diagram of the main step flow of a verification method for a two-way authentication device applied to a two-way authentication device according to an embodiment of the present application;
[0042] Figure 2 FIG. is a schematic diagram of the main step flow of a verification method for a two-way authentication device applied to a cloud server according to an embodiment of the present application;
[0043] Figure 3 FIG. is a schematic diagram of the main step flow of the interaction between a two-way authentication device and a cloud server according to an embodiment of the present application;
[0044] Figure 4 FIG. is a schematic diagram of the hardware environment composed of a two-way authentication device and a cloud server according to an embodiment of the present application. Detailed Embodiments
[0045] In order to enable those skilled in the art to better understand the solution of the present application, the following will clearly and completely describe the technical solutions in the embodiments of the present application in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present application.
[0046] It should be noted that the terms "first", "second", etc. in the description and claims of the present application and the above drawings are used to distinguish similar objects, and do not necessarily need to describe a specific order or sequence. It should be understood that such data can be interchanged under appropriate circumstances so that the embodiments of the present application described here can be implemented in an order other than those illustrated or described here. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or device including a series of steps or units does not necessarily have to be limited to those steps or units clearly listed, but may include other steps or units not clearly listed or inherent to these processes, methods, products, or devices.
[0047] According to one aspect of an embodiment of the present application, a verification method for a two-way authentication device is provided. The verification method for the two-way authentication device is widely used in smart home (Smart Home), smart home, smart home device ecology, smart residential (Intelligence House) ecology and other whole-house intelligent digital control application scenarios. Optionally, in this embodiment, the verification method of the above-mentioned two-way authentication device can be applied to Figure 4 In the hardware environment shown in FIG. 1 , a two-way authentication device 102 and a cloud server 104 are provided. Figure 4 As shown, the cloud server 104 is connected to the two-way authentication device 102 via a network, and can be used to provide services (such as application services, etc.) for the two-way authentication device end or the client installed on the two-way authentication device end. A database can be set on the cloud server or independently of the cloud server to provide data storage services for the cloud server 104. Cloud computing and / or edge computing services can be configured on the cloud server or independently of the cloud server to provide data computing services for the cloud server 104.
[0048] The network may include but is not limited to at least one of the following: wired network, wireless network. The wired network may include but is not limited to at least one of the following: wide area network, metropolitan area network, local area network, and the wireless network may include but is not limited to at least one of the following: WIFI (Wireless Fidelity), Bluetooth. The terminal device 102 may be but is not limited to a PC, a mobile phone, a tablet computer, a smart air conditioner, a smart range hood, a smart refrigerator, a smart oven, a smart stove, a smart washing machine, a smart water heater, a smart washing device, a smart dishwasher, a smart projection device, a smart TV, a smart clothes drying rack, a smart curtain, a smart audio and video, a smart socket, a smart speaker, a smart fresh air device, a smart kitchen and bathroom device, a smart bathroom device, a smart sweeping robot, a smart window cleaning robot, a smart mopping robot, a smart air purification device, a smart steamer, a smart microwave oven, a smart kitchen treasure, a smart purifier, a smart water dispenser, a smart door lock, etc.
[0049] See attached Figure 1 , Figure 1 FIG. 1 is a flow chart of the main steps of a verification method for a two-way authentication device applied to a two-way authentication device according to an embodiment of the present application. Figure 1 As shown, the method is applied to a two-way authentication device, and the two-way authentication device is connected to a cloud server for communication, and includes steps S101 to S104:
[0050] Step S101: In response to a device startup instruction, obtain device identification information.
[0051] Among them, the device identification information is the unique identifier of the two-way authentication device. The device identification information can be a device identifier (Identity document, ID), which is unique and used to identify a device, distinguish different devices, and perform tracking and management. It is the ID card of a device in the cyber space. In actual application scenarios, the device identification information can be a string or a series of data. For example, it can be the International Mobile Equipment Identity (IMEI).
[0052] In this embodiment, the two-way authentication device is a security device. In daily application scenarios, it generally provides a higher level of security by requiring the client and the server to verify each other's identities, and is applicable to scenarios that require high security protection. For example, the two-way authentication device can be a smart home camera. To ensure personal privacy and security, the device identification information of the camera needs to be verified when the camera is initialized.
[0053] In this embodiment, the device startup instruction is the instruction when the two-way authentication device is initialized and started, or it can also be the test startup instruction before the two-way authentication device leaves the factory, which does not affect the normal implementation of the embodiments of the present application.
[0054] In one implementation manner, the verification method of this embodiment can be performed before the two-way authentication device leaves the factory to verify whether the device identification information of the two-way authentication device is abnormal. In other implementation manners, the device identification information of the two-way authentication device can also be automatically verified when the user initializes the two-way authentication device, which does not affect the normal implementation of the embodiments of the present application.
[0055] In this embodiment, the two-way authentication device can pre-establish a communication connection with the cloud server. The cloud server is a server based on cloud computing technology that provides efficient, stable, and secure cloud computing services. Users can access the cloud server through the Internet to provide various applications and services, enabling home devices to connect to the Internet and realizing functions such as remote control, data synchronization, and intelligent analysis, thereby enhancing the user experience and life convenience. For example, the cloud server can be a smart home cloud server, which is specifically used to provide functions such as data storage, processing, and communication for smart home devices.
[0056] Step S102: Send a module identifier acquisition request to the cloud server according to the device identification information.
[0057] In this embodiment, the module identifier acquisition request is a request generated by the two-way authentication device according to the device identification information for acquiring the corresponding module identifier information.
[0058] In one implementation manner, step S102 may specifically include:
[0059] Based on the encryption algorithm, send the encrypted module identification acquisition request to the cloud server.
[0060] In this embodiment, the encryption algorithm may include algorithms such as symmetric encryption, asymmetric encryption, and hash algorithm, etc., so as to ensure the data security of the two-way authentication device and the cloud server during the entire communication interaction process.
[0061] Step S103: Obtain at least one first module identification information corresponding to the device identification information returned by the cloud server according to the module identification acquisition request for the two-way authentication device.
[0062] In this embodiment, the first module identification information is identification information for representing the preset communication connection method of the two-way authentication device pre-stored in the cloud server. Among them, the communication connection method may include Bluetooth, cellular network, wireless network, and other communication connection methods.
[0063] In one embodiment, the first module identification information (Module Identification, moduleID) may be an identification used in communication to identify the communication module of the two-way authentication device to determine the communication connection method between the two-way authentication device and other devices. In other embodiments, the first module identification information may also be a communication connection method identification pre-assigned to the device before the two-way authentication device leaves the factory, used to associate the actual user device data related to the account, App, etc. after the communication connection when the device communicates with other devices, so as to ensure the uniqueness of the device and the traceability of the communication connection method.
[0064] As an example, when the communication connection method of the two-way authentication device is Wireless Fidelity (WIFI), the first module identification information may be the WiFi module ID. When the two-way authentication device connects to the network or is configured, the system at the network end can identify and manage different two-way authentication devices through this WiFi module ID. For example, in practical application scenarios where the two-way authentication device is a wireless surveillance camera or other Internet-connected smart home devices, etc., the network end can achieve remote control and data transmission of the two-way authentication device through the WiFi module ID.
[0065] In one embodiment, the first module identification information may further include information such as the name, serial number, version number, and manufacturer information of the module, which helps to quickly locate the specific module during the maintenance, upgrade, fault troubleshooting, etc. of the device.
[0066] In one embodiment, the device identification information and the first module identification information of multiple or the same batch of two-way authentication devices may be associated with each other in advance and then uploaded and stored in a cloud server.
[0067] In this embodiment, since there are multiple records of device identification information and first module identification information stored in the cloud server, the two-way authentication device may obtain one or more first module identification information.
[0068] In one embodiment, if the cloud server returns that the corresponding first module identification information is not found, it can be directly determined that the verification of the device identification information fails, and a prompt indicating that the two-way authentication device is abnormal is generated and displayed to the user.
[0069] Step S104: Verify whether the device identification information is abnormal according to the first module identification information.
[0070] In this embodiment, verifying whether the device identification information is abnormal refers to verifying whether the device identification information of the two-way authentication device is repeated with the device identification information of other devices.
[0071] In one embodiment, step S104 may further include step S1041 and step S1042:
[0072] Step S1041: Obtain at least one second module identification information pre-set for the two-way authentication device.
[0073] Step S1042: Verify whether the device identification information is abnormal according to the second module identification information and the first module identification information.
[0074] In this embodiment, the second module identification information is identification information pre-stored in the two-way authentication device and used to represent the preset communication connection mode of the two-way authentication device.
[0075] In this embodiment, the second module identification information may be pre-stored or burned into the two-way authentication device. Among them, the second module identification information may be the module identification information of the communication module in the two-way authentication device, which is used to form the identity recognition system of the two-way authentication device to ensure that the device can be correctly identified and communicated in a complex communication network. The function and type are the same as those of the above first module identification information, and will not be elaborated here. It should be noted that theoretically, the first module identification information should be consistent with the second module identification information. If there is a situation where the first module identification information is different from all the second module identification information in the two-way authentication device, it means that there is another two-way authentication device with the same device identification information as this two-way authentication device, and at this time, the device identification information is abnormal.
[0076] In one embodiment, step S1042 may further include steps S10421 to S1043:
[0077] Step S10421: According to the second module identification information, determine whether the first module identification information belongs to a two-way authentication device. If it belongs, proceed to step S10422; if not, proceed to step S10423.
[0078] Step S10422: Determine that the device identification information verification is successful.
[0079] Step S10423: If not, determine that the device identification information verification fails and generate a device identification information exception prompt.
[0080] In this embodiment, after step S10422, the initialization process of the two-way authentication device and subsequent business operations for remotely controlling the two-way authentication device can continue.
[0081] In one embodiment, step S10421 may further include steps S104211 to S104213:
[0082] Step S104211: Determine whether there is a first module identification information in at least one first module identification information that is different from any second module identification information. If not, proceed to step S104212; if so, proceed to step S104213.
[0083] Step S104212: Determine that the first module identification information belongs to a two-way authentication device.
[0084] Step S104213: Determine that the first module identification information does not belong to a two-way authentication device.
[0085] In this embodiment, if there is a module identification information in the first module identification information obtained by the two-way authentication device that is different from the second module identification information, it is determined that the device identification information is abnormal.
[0086] Specifically, a second module identification information can be obtained from the two-way authentication device. When the two-way authentication device obtains a first module identification information, if the first module identification information is different from the second module identification information, it is determined that the first module identification information does not belong to the two-way authentication device, and then it is determined that the device identification information is abnormal; if the first module identification information is the same as the second module identification information, it is determined that the first module identification information belongs to the two-way authentication device, and then it is determined that the device identification information verification is successful. When the two-way authentication device obtains two or more first module identification information, if there is a module identification information in the first module identification information that is different from the second module identification information, it is determined that the first module identification information does not belong to the two-way authentication device, and then it is determined that the device identification information is abnormal; if the module identification information in the first module identification information is the same as the second module identification information, it is determined that the first module identification information belongs to the two-way authentication device, and then it is determined that the device identification information verification is successful.
[0087] Multiple second module identification information can also be obtained from the two-way authentication device. When the two-way authentication device obtains a first module identification information, if the first module identification information is different from any of the second module identification information, it is determined that the first module identification information does not belong to the two-way authentication device, and then it is determined that the device identification information is abnormal; if the first module identification information is the same as one of the second module identification information, it is determined that the first module identification information belongs to the two-way authentication device, and then it is determined that the device identification information verification is successful. When the two-way authentication device obtains two or more first module identification information, if there is a module identification information in the first module identification information that is different from any of the second module identification information, it is determined that the first module identification information does not belong to the two-way authentication device, and then it is determined that the device identification information is abnormal; if there is no module identification information in the first module identification information that is different from any of the second module identification information, it is determined that the first module identification information belongs to the two-way authentication device, and then it is determined that the device identification information verification is successful.
[0088] Through the above configuration method, in this application, by obtaining the device identification information when the two-way authentication device is started, at least one first module identification information corresponding to the device identification information in the cloud server can be obtained. Since the first module identification information is the identification information used to identify the communication connection method of the two-way authentication device, theoretically it should be consistent with the module identification information of this two-way authentication device. Therefore, the first module identification information can be used to determine whether the device identification information of the two-way authentication device is abnormal, so that the abnormal situation of the device identification information can be discovered in time, and then the problem of device miscontrol caused by the repetition of the device identification information of multiple two-way authentication devices can be avoided, thereby reducing the after-sales repair requirements of users and reducing the after-sales service cost of device manufacturers.
[0089] Further, the present application also provides another verification method for a two-way authentication device.
[0090] Refer to the appendix Figure 2 , Figure 2 which is a schematic flowchart of the main steps of a verification method for a two-way authentication device applied to a cloud server according to an embodiment of the present application. As Figure 2 shown, this method is applied to a cloud server, and the cloud server is communicatively connected to the two-way authentication device. This method may include steps S201 to S202:
[0091] Step S201: In response to a module identifier acquisition request sent by the two-way authentication device, obtain at least one first module identifier information corresponding to the device identifier information of the two-way authentication device.
[0092] In this embodiment, the module identifier acquisition request is a request generated by the two-way authentication device according to the device identifier information. The first module identifier information is identifier information pre-stored in the cloud server for identifying the communication connection mode of the two-way authentication device.
[0093] In this embodiment, the two-way authentication device is a device that uses two-way authentication technology to enhance communication security, and can usually be a home intelligent device, such as a device that requires security authentication like a smart camera.
[0094] In this embodiment, the cloud server can be a virtual server of a cloud platform storing application programs and data. In the home field, by moving the data storage and processing of home devices to the cloud server, remote monitoring and control of home devices can be realized, improving the intelligence and convenience of home life. For example, the two-way authentication device can include a monitoring camera, a temperature control system, or a lighting system. Through the cloud server, users can view the status of these devices at home in real time and perform remote control.
[0095] In this embodiment, the cloud server can pre-establish a communication connection with the two-way authentication device in advance for interacting with requests, instructions, or information.
[0096] In this embodiment, the first module identifier information is the same as the first module identifier information in the above embodiment of the verification method for the two-way authentication device applied to the two-way authentication device, and will not be elaborated here. Since the first module identifier information can be used to represent the communication connection mode of the two-way authentication device, and the communication connection mode between the two-way authentication device and the cloud server can include Bluetooth, cellular network, wireless network, and other communication connection modes, there may be multiple association relationships between the device identifier information of the two-way authentication device and the first module identifier information stored in the cloud server. Therefore, the cloud server may obtain one or more first module identifier information.
[0097] In one embodiment, step S201 may specifically include step S2011:
[0098] Step 2011: Query in the association data table of the cloud server according to the device identification information, and obtain at least one first module identification information corresponding to the device identification information.
[0099] Among them, the association data table is used to store the association relationship between the device identification information of at least one two-way authentication device and the first module identification information.
[0100] Step S202: Send the obtained at least one first module identification information to the two-way authentication device, so that the two-way authentication device verifies whether the device identification information is abnormal according to the first module identification information.
[0101] In this embodiment, the two-way authentication device verifies whether the device identification information is abnormal according to the first module identification information in the same manner as the judgment method in the above-mentioned embodiment of the verification method of the two-way authentication device applied to the two-way authentication device, and will not be elaborated here.
[0102] In one embodiment, step S202 may further include step S2021:
[0103] Step S2021: Based on the encryption algorithm, send the encrypted at least one first module identification information to the two-way authentication device.
[0104] In this embodiment, the encryption algorithm may include symmetric encryption, asymmetric encryption, hash function, homomorphic encryption, quantum encryption, and digital signature technology, etc., in order to protect the security and integrity of the cloud data and the data transmission security during the interaction process between the cloud server and the two-way authentication device.
[0105] In one embodiment, refer to the appendix Figure 3 , Figure 3 is a schematic diagram of the main step flow of the interaction between the two-way authentication device and the cloud server according to an embodiment of the present application. As Figure 3 shown, the method may further include steps S301 to S307:
[0106] Step S301: Start the device and complete the initialization.
[0107] In this embodiment, the device is a two-way authentication device. After step S301 starts the two-way authentication device, the two-way authentication device performs an initialization operation and automatically starts to verify whether the device ID is abnormal. Among them, the device ID is equivalent to the device identification information in the above-mentioned embodiment.
[0108] Step S302: The device SDK sends a request to the cloud to obtain the module ID.
[0109] In this embodiment, the device SDK (Software Development Kit) is a software development kit in a two-way authentication device, which is a collection of development tools for building application software with specific software packages, software frameworks, hardware platforms, operating systems, etc. It can be used to generate a module ID acquisition request based on the device ID of the two-way authentication device and send it to the cloud server.
[0110] In this embodiment, the module ID is equivalent to the first module identification information in the above embodiment.
[0111] Step S303: The cloud queries and returns the module ID.
[0112] In this embodiment, the cloud refers to the cloud server in the above embodiment.
[0113] In one embodiment, the cloud can pre-store the association relationship between the device IDs and module IDs of multiple two-way authentication devices in a table or database, etc., so as to query the module ID corresponding to the device ID of the two-way authentication device according to the module ID acquisition request of the two-way authentication device.
[0114] Step S304: The device receives and verifies the module ID.
[0115] In this embodiment, the two-way authentication device receives the module ID sent by the cloud and verifies whether the module ID belongs to this device.
[0116] In one embodiment, it can be determined whether the obtained module ID belongs to this device according to whether the module ID is consistent with the module ID stored in this device.
[0117] Step S305: Determine whether the module ID belongs to this device. If so, proceed to step S306; if not, proceed to step S307.
[0118] Step S306: Continue with the relevant business.
[0119] In this embodiment, after the user completes the initialization of the two-way authentication device, the verification process of the device ID of the two-way authentication device can be carried out. After verifying that the device ID is normal, the user can perform business operations on the two-way authentication device. For example, if the two-way authentication device is a smart camera, the business operations can include normally starting the monitoring function of the camera, allowing the user to remotely control it through a mobile phone applet, and other business operations.
[0120] Step S307: Stop the relevant business operations and issue a device ID abnormality prompt.
[0121] In one embodiment, the interactive process between the two-way authentication device and the cloud can also adopt encryption transmission technology to ensure the security of communication between the device and the cloud and data confidentiality.
[0122] Through the above configuration method, the present application obtains the module identification information through the interaction between the two-way authentication device and the cloud server. Since the module identification information corresponds to the device identification information, it is possible to determine whether the device identification information of the two-way authentication device is abnormal by obtaining the module identification information corresponding to the device identification information in the cloud server, thereby avoiding the problem of incorrect device control caused by duplicate device identification information of multiple two-way authentication devices, improving the security and operation accuracy of the two-way authentication device in the smart home system, and protecting user privacy and usage experience.
[0123] Moreover, this verification method can be used to determine whether the device identification information of the two-way authentication device is duplicated before the two-way authentication device leaves the factory or when the user initializes the device, reducing the problem of incorrect device control caused by duplicate device identification information during the subsequent use of the user, thereby reducing the user's after-sales repair requirements and the after-sales service cost of the device manufacturer.
[0124] Finally, an abnormal device identification information prompt can also be generated when it is verified that the device identification information of the two-way authentication device is abnormal, improving the abnormal handling mechanism when the device identification information of the two-way authentication device conflicts, and can prompt the user in time to prevent incorrect operations or privacy leaks during subsequent business operations on the two-way authentication device.
[0125] Another aspect of the present application also provides a two-way authentication device. In an embodiment of a two-way authentication device according to the present application, the two-way authentication device may include a memory and a processor. A computer program is stored in the memory, and the processor is configured to execute the verification method of the two-way authentication device applied to the two-way authentication device in the above embodiment through the computer program.
[0126] Another aspect of the present application also provides a cloud server. In an embodiment of a server according to the present application, the server may include a memory and a processor. A computer program is stored in the memory, and the processor is configured to execute the verification method of the two-way authentication device applied to the cloud server in the above embodiment through the computer program.
[0127] Further, the present application also provides a computer-readable storage medium. In an embodiment of a computer-readable storage medium according to the present application, the computer-readable storage medium may be configured to store a program for executing the verification method of the two-way authentication device in the above method embodiment, and this program can be loaded and run by a processor to implement the verification method of the two-way authentication device. For the sake of convenience of description, only the parts related to the embodiments of the present application are shown. For those specific technical details not disclosed, please refer to the method part of the embodiments of the present application. The computer-readable storage medium may be a memory device formed by various electronic devices. Optionally, the computer-readable storage medium in the embodiments of the present application is a non-transitory computer-readable storage medium.
[0128] Furthermore, it should be understood that since the setting of each module is only to illustrate the functional units of the device of the present application, the physical devices corresponding to these modules may be the processor itself, or a part of the software in the processor, a part of the hardware, or a part of the combination of software and hardware. Therefore, the number of each module in the figure is only illustrative.
[0129] Those skilled in the art can understand that the various modules in the device can be adaptively split or combined. Such splitting or combination of specific modules will not cause the technical solution to deviate from the principle of the present application. Therefore, the technical solutions after splitting or combination will all fall within the protection scope of the present application.
[0130] The above are only the preferred embodiments of the present application. It should be noted that for those of ordinary skill in the art, without departing from the principle of the present application, several improvements and refinements can be made, and these improvements and refinements should also be regarded as the protection scope of the present application.
[0131] So far, the technical solution of the present application has been described in combination with the preferred embodiments shown in the drawings. However, those skilled in the art can easily understand that the protection scope of the present application is obviously not limited to these specific embodiments. Without departing from the principle of the present application, those skilled in the art can make equivalent changes or substitutions to the relevant technical features, and the technical solutions after these changes or substitutions will all fall within the protection scope of the present application.
Claims
1. A verification method for a two-way authentication device, characterized in that The method is applied to a two-way authentication device, The two-way authentication device is communicatively connected to a cloud server and includes: In response to a device startup instruction, obtain device identification information, where the device identification information is the unique identifier of the two-way authentication device; According to the device identification information, send a module identification acquisition request to the cloud server; Obtain at least one first module identification information corresponding to the device identification information returned by the cloud server according to the module identification acquisition request; the first module identification information is pre-stored in the cloud server and is identification information used to identify the communication connection method of the two-way authentication device; According to the first module identification information, verify whether the device identification information is abnormal.
2. The method of the two-way authentication device according to claim 1, wherein The verification of whether the device identification information is abnormal includes: Obtain at least one second module identification information pre-set for the two-way authentication device, where the second module identification information is pre-stored in the two-way authentication device and is identification information used to identify the communication connection method of the two-way authentication device; According to the second module identification information and the first module identification information, verify whether the device identification information is abnormal.
3. The verification method of the two-way authentication device according to claim 2, wherein The verification of whether the device identification information is abnormal according to the second module identification information and the first module identification information includes: According to the second module identification information, determine whether the first module identification information belongs to the two-way authentication device; If it belongs, determine that the device identification information verification is successful; If it does not belong, determine that the device identification information verification fails and generate a device identification information abnormality prompt.
4. The verification method of the two-way authentication device according to claim 3, wherein The determination of whether the first module identification information belongs to the two-way authentication device according to the second module identification information includes: Determine whether there is a first module identification information in the at least one first module identification information that is different from any of the second module identification information; If not, determine that the first module identification information belongs to the two-way authentication device; If so, determine that the first module identification information does not belong to the two-way authentication device.
5. The verification method of the two-way authentication device according to claim 1, wherein The sending of the module identification acquisition request to the cloud server includes: Based on an encryption algorithm, send the encrypted module identification acquisition request to the cloud server.
6. A verification method for a two-way authentication device, characterized in that, The method is applied to a cloud server, and the cloud server is communicatively connected to a two-way authentication device; the method includes: In response to a module identification acquisition request sent by the two-way authentication device, at least one first module identification information corresponding to the device identification information of the two-way authentication device is acquired, where the module identification acquisition request is a request generated by the two-way authentication device based on the device identification information; the first module identification information is identification information that is pre-stored in the cloud server and is used to identify the communication connection method of the two-way authentication device. The at least one first module identification information acquired is sent to the two-way authentication device, so that the two-way authentication device verifies whether the device identification information is abnormal based on the first module identification information.
7. The verification method of the two-way authentication device according to claim 5, wherein acquiring at least one first module identification information corresponding to the device identification information of the two-way authentication device includes: querying in the association data table of the cloud server according to the device identification information to obtain at least one first module identification information corresponding to the device identification information; wherein the association data table is used to store the association relationship between the device identification information of at least one two-way authentication device and the first module identification information; and / or, sending the at least one first module identification information acquired to the two-way authentication device includes: sending the encrypted at least one first module identification information to the two-way authentication device based on an encryption algorithm.
8. A computer-readable storage medium, characterized in that, The computer-readable storage medium includes a stored program, wherein the program, when running, executes the verification method of the two-way authentication device according to any one of claims 1 to 7.
9. A two-way authentication device, comprising a memory and a processor, characterized in that, A computer program is stored in the memory, and the processor is configured to execute the verification method of the two-way authentication device according to any one of claims 1 to 5 through the computer program.
10. A cloud server, comprising a memory and a processor, characterized in that, A computer program is stored in the memory, and the processor is configured to execute the verification method of the two-way authentication device according to any one of claims 6 to 7 through the computer program.