Equipment fingerprint generation method and device, electronic equipment and storage medium

Abstract

The invention provides an equipment fingerprint generation method and device, electronic equipment and a storage medium, and is applied to the field of finance or medical treatment. The equipment fingerprint generation method provided by the invention comprises the following steps: acquiring equipment data; encrypting the equipment data to obtain encrypted equipment data, generating a first signature according to the encrypted equipment data, splicing the encrypted equipment data and the first signature to form second spliced data, and encoding the second spliced data; the method comprises the following steps: encoding equipment data, analyzing encoded data to obtain encrypted equipment data and a first signature, verifying the first signature, if verification succeeds, decrypting the encrypted equipment data to obtain the equipment data, generating a second signature according to the equipment data, and taking the second signature as an equipment fingerprint. According to the method, the device fingerprint can be generated, and the uniqueness and stability of device identification can be improved.

Description

Technical Field

[0001] The present invention relates to the technical field of data processing, and in particular, to a method, device, electronic device, and storage medium for generating device fingerprints. Background Art

[0002] In the Internet era, in the medical field or the financial field, enterprises can identify user devices through Cookies (data stored on the user's local terminal) and IP addresses. Cookies can record and track user access records, frequencies, computer information, and even user information. Cookies are widely used for the identification of Web devices, and Cookies are generally stored locally by users. Users can evade detection by clearing local data, resulting in low stability of Cookies as device identification. IP addresses can be used for the buried point tracking of some services. With the development of dynamic IP allocation technologies for local area networks and mobile networks, the uniqueness of IP addresses as device identifiers has greatly decreased. Summary of the Invention

[0003] The purpose of the present invention is to provide a method, device, electronic device, and storage medium for generating device fingerprints to solve the technical problem of low uniqueness and stability of device identification in the prior art.

[0004] The technical solution of the present invention is as follows. A method for generating device fingerprints is provided, including:

[0005] Obtaining device data, where the device data includes multiple of device model, advertising identifier, supplier identifier, true screen resolution, mobile phone memory size, universal unique identifier, and device identifier;

[0006] Encrypting the device data to obtain encrypted device data, generating a first signature according to the encrypted device data, splicing the encrypted device data and the first signature to form second spliced data, and encoding the second spliced data;

[0007] Parsing the encoded data to obtain the encrypted device data and the first signature, verifying the first signature. If the verification is successful, decrypting the encrypted device data to obtain the device data, generating a second signature according to the device data, and using the second signature as the device fingerprint.

[0008] Further, generating a first signature according to the encrypted device data includes:

[0009] Splicing the encrypted device data with the SESSIONID of the current user to form first spliced data, and generating a first signature for the first spliced data.

[0010] Further, generating a first signature for the first spliced data includes generating a first signature for the first spliced data using the SHA1 algorithm; generating a second signature based on the device data includes generating a second signature using the SHA1 algorithm and the device data.

[0011] Further, generating a second signature using the SHA1 algorithm and the device data includes:

[0012] Concatenating each parameter information in the device data in a preset order, and processing the concatenated device data using the SHA1 algorithm to generate a second signature.

[0013] Further, after encoding the second spliced data, it further includes uploading the encoded data to the server; parsing the encoded data includes causing the server to parse the encoded data.

[0014] Further, verifying the first signature includes:

[0015] Causing the server to obtain the current user's SESSIONID using the current user's ID, determining a third signature using the current user's SESSIONID and the encrypted device data, and verifying the first signature based on the third signature. If the third signature is consistent with the first signature, the verification is successful; otherwise, the verification fails.

[0016] Further, encoding the second spliced data includes encoding the second spliced data using BASE64.

[0017] Another technical solution of the present invention is as follows. There is provided a device fingerprint generation device, including a data acquisition module, an encoding module, and a fingerprint generation module;

[0018] The data acquisition module is used to acquire device data, where the device data includes multiple of device model, advertising identifier, supplier identifier, screen true resolution, mobile phone memory size, universal unique identifier, and device identifier;

[0019] The encoding module is used to encrypt the device data to obtain encrypted device data, generate a first signature based on the encrypted device data, splice the encrypted device data and the first signature to form second spliced data, and encode the second spliced data;

[0020] The fingerprint generation module is used to parse the encoded data to obtain the encrypted device data and the first signature, verify the first signature. If the verification is successful, decrypt the encrypted device data to obtain the device data, generate a second signature based on the device data, and use the second signature as the device fingerprint.

[0021] Another technical solution of the present invention is as follows. There is provided an electronic device including a memory and a processor. The memory stores a computer program executable by the processor. When the processor executes the computer program, the device fingerprint generation method described in any of the above technical solutions is implemented.

[0022] Another technical solution of the present invention is as follows. There is provided a computer-readable storage medium storing a computer program. When the computer program is executed by a processor, the device fingerprint generation method described in any of the above technical solutions is implemented.

[0023] The beneficial effects of the present invention are as follows: Obtain device data, where the device data includes multiple of device model, advertising identifier, supplier identifier, true screen resolution, mobile phone memory size, universal unique identifier, and device identifier; encrypt the device data to obtain encrypted device data, generate a first signature based on the encrypted device data, splice the encrypted device data and the first signature to form second spliced data, and encode the second spliced data; parse the encoded data to obtain the encrypted device data and the first signature, verify the first signature. If the verification is successful, decrypt the encrypted device data to obtain the device data, generate a second signature based on the device data, and use the second signature as the device fingerprint; through the above technical solutions, a device fingerprint can be generated, and applying the device fingerprint to device identification can improve the uniqueness and stability of device identification. Description of the Drawings

[0024] Figure 1 It is a schematic flowchart of the device fingerprint generation method provided by an embodiment of the present invention;

[0025] Figure 2 It is a schematic structural diagram of the device fingerprint generation device provided by an embodiment of the present invention;

[0026] Figure 3 It is a schematic structural diagram of the electronic device provided by an embodiment of the present invention. Detailed Embodiments

[0027] Next, the technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. All other embodiments obtained by those of ordinary skill in the art based on the embodiments of the present invention without creative efforts belong to the scope of protection of the present invention.

[0028] In the description of the present application, terms such as "first" and "second" are only used for the purpose of distinguishing descriptions, and cannot be understood as indicating or implying relative importance, nor can they be understood as indicating or implying order. In this specification, the terms "comprising", "including", "having" and their variants all mean "including but not limited to", unless otherwise specifically emphasized in other ways.

[0029] Referring to "embodiments" herein means that specific features, structures, or characteristics described in connection with the embodiments can be included in at least one embodiment of the present invention. The phrase appears in various places in the specification and does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment mutually exclusive with other embodiments. Those skilled in the art will explicitly and implicitly understand that the embodiments described herein can be combined with other embodiments.

[0030] Figure 1 It is a flowchart of the device fingerprint generation method according to an embodiment of the present invention. It should be noted that if there are substantially the same results, the device fingerprint generation method of the present invention is not limited to Figure 1 the process sequence shown. As Figure 1 shown, the device fingerprint generation method mainly includes the following steps:

[0031] S101. Obtain device data, where the device data includes multiple of device model, advertising identifier, supplier identifier, true screen resolution, mobile phone memory size, universal unique identifier, and device identifier;

[0032] In some embodiments, without loss of generality, taking a device with an iOS system as an example, the device data that can be obtained includes device model, advertising identifier, supplier identifier, true screen resolution, mobile phone memory size, universally unique identifier, and device identifier. Some or all of the parameter information can be used as device data. For the device model (Model), for devices of the same model from the same manufacturer, the parameter value is the same; for the advertising identifier (IDFA), if the user restores location and privacy, the advertising identifier will be regenerated; for the supplier identifier (IDFV), if the suppliers are the same, the same string is returned, and if the suppliers are different, different strings are returned; for the true screen resolution (Screen), no permission needs to be applied, and for the same device, the value is the same; for the mobile phone memory size (Memory), no permission needs to be applied, and for the same device, the value is the same; for the universally unique identifier (Uuid), it is calculated based on data such as the current time, counter, and hardware identifier. The device identifier can be represented as OpenUUID, and the device identifier can be represented as SimulateIDFA. For devices of other systems, corresponding device data can also be obtained, and the device data can include some parameter information among device model, advertising identifier, supplier identifier, true screen resolution, mobile phone memory size, universally unique identifier, and device identifier. The device data can also include parameter information such as IMEI (International Mobile Equipment Identity), device serial number, MAC address, and advertising tracking identifier.

[0033] S102. Encrypt the device data to obtain the encrypted device data, generate a first signature based on the encrypted device data, splice the encrypted device data and the first signature to form second spliced data, and encode the second spliced data.

[0034] In some embodiments, after obtaining the device data, an instance can be declared with the field name key and the specific value value to store the obtained device data. An NSDictionary instance can be used. Among them, NSDictionary is a data structure in the Objective-C language for storing key-value pairs. The above device data can be encrypted as a whole using the ASE (Advanced Encryption Standard) algorithm to obtain the encrypted device data, and the ASE algorithm is a symmetric encryption algorithm.

[0035] In an alternative embodiment, generating a first signature based on the encrypted device data includes:

[0036] Concatenate the encrypted device data with the SESSIONID of the current user to form the first concatenated data, and generate a first signature for the first concatenated data.

[0037] It should be noted that this first signature is used for verification on the server side to verify whether the encrypted device data has been tampered with.

[0038] In an optional embodiment, encoding the second concatenated data includes: encoding the second concatenated data using BASE64.

[0039] In some embodiments, when concatenating the encrypted device data and the first signature, the two parts of data can be separated by a "." sign, and then the overall second concatenated data is encoded using BASE64.

[0040] In an optional embodiment, after encoding the second concatenated data, it further includes uploading the encoded data to the server; parsing the encoded data includes having the server parse the encoded data.

[0041] In some embodiments, the process of encoding the second concatenated data and the previous processes can be performed on the client side. Upload the encoded data to the server and have the server parse the encoded data.

[0042] S103, parse the encoded data to obtain the encrypted device data and the first signature, verify the first signature. If the verification is successful, decrypt the encrypted device data to obtain the device data, and generate a second signature based on the device data, using the second signature as the device fingerprint.

[0043] In an optional embodiment, verifying the first signature includes:

[0044] Have the server obtain the SESSIONID of the current user using the ID of the current user, determine a third signature using the SESSIONID of the current user and the encrypted device data, and verify the first signature based on the third signature. If the third signature is consistent with the first signature, the verification is successful; otherwise, the verification fails.

[0045] In some embodiments, if the third signature is not consistent with the first signature, the verification fails, indicating that the encrypted device data may have been tampered with or forged. At this time, discard the encrypted device data.

[0046] In an alternative embodiment, generating a first signature for the first spliced data includes generating a first signature for the first spliced data using the SHA1 algorithm; generating a second signature based on the device data includes generating a second signature using the SHA1 algorithm and the device data.

[0047] It should be noted that SHA1, i.e., Secure Hash Algorithm 1, is a cryptographic hash function, and SESSIONID is a string of characters or numbers used to uniquely identify a user session between a server and a client. When generating a first signature for the first spliced data using the SHA1 algorithm and generating a second signature using the SHA1 algorithm and the device data, techniques for enhancing password storage security (such as salt) can be used. Using the current user's SESSIONID and the encrypted device data, the algorithm used for determining the third signature can be the SHA1 algorithm.

[0048] In an alternative embodiment, generating a second signature using the SHA1 algorithm and the device data includes:

[0049] Concatenate each parameter information in the device data in a preset order, and use the SHA1 algorithm to process the concatenated device data to generate a second signature.

[0050] In some embodiments, to ensure the stability of the device, the concatenation order of relevant fields (each parameter information) should be kept consistent when generating the device fingerprint and cannot be randomly changed. If the parameter information required for generating the device fingerprint fails to be obtained or the obtained value is invalid, an empty string can be used for replacement. After the server generates the device fingerprint, it returns the device fingerprint to the client and saves it in the database.

[0051] The device fingerprint generation method provided by the embodiments of the present invention includes obtaining device data, where the device data includes multiple of device model, advertising identifier, supplier identifier, screen true resolution, mobile phone memory size, universal unique identifier, and device identifier; encrypting the device data to obtain encrypted device data, generating a first signature based on the encrypted device data, concatenating the encrypted device data and the first signature to form second spliced data, and encoding the second spliced data; parsing the encoded data to obtain the encrypted device data and the first signature, verifying the first signature, if the verification is successful, decrypting the encrypted device data to obtain the device data, generating a second signature based on the device data, and using the second signature as the device fingerprint; applying the device fingerprint to device identification can improve the uniqueness and stability of device identification.

[0052] The device fingerprint generation method provided by the embodiments of the present invention can effectively ensure the security of data during transmission by using encrypted transmission, strongly bind the collected data to the current user through signature, and reduce the risk of data replacement during transmission; the device fingerprint can ensure stability and uniqueness. In addition to relying on the server, it also relies on the local storage logic of the client. Each time the client uses the device fingerprint, it first reads the device fingerprint stored locally. Only when the local reading fails will it request the server to obtain the device fingerprint again to prevent the pressure caused by high-frequency requests to the server.

[0053] In the scenarios of big data and machine learning, the device fingerprint obtained by the device fingerprint generation method provided by the embodiments of the present invention can be used as the most basic field to analyze the number of active devices, the number of new devices, etc. The device fingerprint can ensure the uniqueness of the user even when the user reinstalls the system or upgrades the system, etc. By using the device fingerprint, it is possible to well identify attacks initiated by machines and scripts, and the device fingerprint can effectively detect the device terminal environment and operation risks, such as emulators, jailbreaks, debugging, injection, etc.

[0054] The device fingerprint generation method provided by the embodiments of the present invention can be constructed based on artificial intelligence, obtain and process relevant data based on artificial intelligence technology, and realize unattended artificial intelligence device fingerprint generation. Among them, artificial intelligence (AI) is a theory, method, technology and application system that uses digital computers or machines controlled by digital computers to simulate, extend and expand human intelligence, perceive the environment, acquire knowledge and use knowledge to obtain the best results.

[0055] Artificial intelligence basic technologies generally include technologies such as sensors, dedicated artificial intelligence chips, cloud computing, distributed storage, big data processing technology, operation / interaction systems, and mechatronics. Artificial intelligence software technologies mainly include several major directions such as computer vision technology, robotics, biometric technology, speech processing technology, natural language processing technology, and machine learning / deep learning.

[0056] Figure 2 is a schematic structural diagram of the device fingerprint generation device according to the embodiments of the present invention, as Figure 2 shown, the device fingerprint generation device 20 includes a data acquisition module 21, an encoding module 22, and a fingerprint generation module 23;

[0057] The data acquisition module 21 is used to acquire device data, and the device data includes multiple of device model, advertising identifier, supplier identifier, screen true resolution, mobile phone memory size, universal unique identifier, and device identifier;

[0058] The encoding module 22 is configured to encrypt the device data to obtain the encrypted device data, generate a first signature based on the encrypted device data, splice the encrypted device data and the first signature to form a second spliced data, and encode the second spliced data;

[0059] The fingerprint generation module 23 is configured to parse the encoded data to obtain the encrypted device data and the first signature, verify the first signature. If the verification is successful, decrypt the encrypted device data to obtain the device data, generate a second signature based on the device data, and use the second signature as the device fingerprint.

[0060] In some embodiments, without loss of generality, taking a device with iOS system as an example, the device data that can be obtained includes device model, advertising identifier, supplier identifier, true screen resolution, mobile phone memory size, universally unique identifier, and device identifier. Some or all of the parameter information can be used as the device data. For the device model (Model), for devices of the same model from the same manufacturer, the parameter value is the same; for the advertising identifier (IDFA), if the user restores location and privacy, the advertising identifier will be regenerated; for the supplier identifier (IDFV), if the suppliers are the same, the same string is returned, and if the suppliers are different, different strings are returned; for the true screen resolution (Screen), no permission needs to be applied, and for the same device, the value is the same; for the mobile phone memory size (Memory), no permission needs to be applied, and for the same device, the value is the same; for the universally unique identifier (Uuid), it is calculated based on data such as the current time, counter, and hardware identifier. The device identifier can be represented as OpenUUID, and the device identifier can be represented as SimulateIDFA. For devices of other systems, corresponding device data can also be obtained, and the device data can include some of the parameter information such as device model, advertising identifier, supplier identifier, true screen resolution, mobile phone memory size, universally unique identifier, and device identifier.

[0061] In some embodiments, after obtaining the device data, an instance can be declared with the field name key and the specific value value to store the obtained device data. An NSDictionary instance can be used. Among them, NSDictionary is a data structure in the Objective-C language for storing key-value pairs. The above device data can be encrypted as a whole using the ASE (Advanced Encryption Standard) algorithm to obtain the encrypted device data. The ASE algorithm is a symmetric encryption algorithm.

[0062] In an alternative embodiment, the encoding module 22 generates a first signature based on the encrypted device data, including:

[0063] Concatenate the encrypted device data with the SESSIONID of the current user to form first concatenated data, and generate a first signature for the first concatenated data.

[0064] In an alternative embodiment, the encoding module 22 generates a first signature for the first concatenated data, including generating a first signature for the first concatenated data using the SHA1 algorithm; the fingerprint generation module 23 generates a second signature based on the device data, including generating a second signature using the SHA1 algorithm and the device data.

[0065] It should be noted that SHA1, i.e., Secure Hash Algorithm 1, is a cryptographic hash function, and SESSIONID is a string of characters or numbers used to uniquely identify a user session between a server and a client. When generating a first signature for the first concatenated data using the SHA1 algorithm and generating a second signature using the SHA1 algorithm and the device data, techniques for enhancing password storage security (such as salt) can be used. The algorithm used to determine the third signature can be the SHA1 algorithm using the SESSIONID of the current user and the encrypted device data.

[0066] In an alternative embodiment, the fingerprint generation module 23 generates a second signature using the SHA1 algorithm and the device data, including:

[0067] Concatenate the respective parameter information in the device data in a preset order, and process the concatenated device data using the SHA1 algorithm to generate a second signature.

[0068] In some embodiments, to ensure the stability of the device, the concatenation order of relevant fields (each parameter information) should be kept consistent when generating the device fingerprint and cannot be randomly changed. If the parameter information required to generate the device fingerprint fails to be obtained or the obtained value is invalid, an empty string can be used for replacement. After the device fingerprint is generated by the server, the device fingerprint is returned to the client and saved in the database.

[0069] In an alternative embodiment, the encoding module 22 is further configured to upload the encoded data to the server after encoding the second concatenated data; the fingerprint generation module 23 parses the encoded data, including causing the server to parse the encoded data.

[0070] In some embodiments, the process of encoding the second spliced data and the previous processes can be performed on the client side. The encoded data is uploaded to the server, and the server parses the encoded data.

[0071] In an alternative embodiment, the fingerprint generation module 23 validates the first signature, including:

[0072] The server uses the current user's ID to obtain the current user's SESSIONID, determines a third signature using the current user's SESSIONID and the encrypted device data, and validates the first signature based on the third signature. If the third signature is consistent with the first signature, the validation is successful; otherwise, the validation fails.

[0073] In some embodiments, if the third signature is inconsistent with the first signature, the validation fails, indicating that the encrypted device data may have been tampered with or forged. In this case, the encrypted device data is discarded.

[0074] In an alternative embodiment, the encoding module 22 encodes the second spliced data, including: encoding the second spliced data using BASE64.

[0075] In some embodiments, when splicing the encrypted device data and the first signature, the two parts of data can be separated by a "." sign, and then the overall second spliced data is encoded using BASE64.

[0076] Figure 3 It is a schematic structural diagram of an electronic device according to an embodiment of the present invention. As Figure 3 shown, the electronic device 30 includes a processor 31 and a memory 32 communicatively connected to the processor 31.

[0077] The memory 32 stores program instructions for implementing the device fingerprint generation method according to any of the above embodiments.

[0078] The processor 31 is configured to execute the program instructions stored in the memory 32 to generate a device fingerprint.

[0079] Among them, the processor 31 may also be referred to as a CPU (Central Processing Unit). The processor 31 may be an integrated circuit chip with signal processing capabilities. The processor 31 may also be a general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0080] An embodiment of the present invention provides a storage medium. The storage medium of the embodiment of the present invention stores program instructions capable of implementing all the above methods. The storage medium can be non-volatile or volatile. Among them, the program instructions can be stored in the above storage medium in the form of a software product, including several instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) or a processor to execute all or part of the steps of the methods described in various embodiments of the present invention. The foregoing storage medium includes: various media that can store program codes such as USB flash drives, mobile hard disks, read-only memories (ROMs), random access memories (RAMs), magnetic disks, or optical discs, or terminal devices such as computers, servers, mobile phones, and tablets.

[0081] In several embodiments provided by the present invention, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are merely illustrative. For example, the division of modules is only a logical function division. In actual implementation, there may be other division methods. For example, multiple modules or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the couplings or direct couplings or communication connections shown or discussed with each other can be through some interfaces. The indirect couplings or communication connections of devices or modules can be in electrical, mechanical, or other forms.

[0082] In addition, each functional module in various embodiments of the present invention can be integrated in a processing unit, or each module can exist physically alone, or two or more modules can be integrated in a unit. The above integrated unit can be implemented in the form of hardware or in the form of a software functional unit. The above is only the embodiment of the present invention, and it does not limit the patent scope of the present invention. Any equivalent structure or equivalent process transformation made by using the content of the specification and drawings of the present invention, or directly or indirectly applied in other related technical fields, is equally included in the patent protection scope of the present invention.

[0083] The above is only the embodiment of the present invention. It should be noted here that for those of ordinary skill in the art, improvements can be made without departing from the creative concept of the present invention, but these all belong to the protection scope of the present invention.

Claims

1. A method for generating device fingerprints, characterized in that, Including: Obtain device data, where the device data includes multiple of device model, advertising identifier, supplier identifier, true screen resolution, mobile phone memory size, universal unique identifier, and device identifier; Encrypt the device data to obtain encrypted device data, generate a first signature based on the encrypted device data, splice the encrypted device data and the first signature to form second spliced data, and encode the second spliced data; Parse the encoded data to obtain the encrypted device data and the first signature, verify the first signature. If the verification is successful, decrypt the encrypted device data to obtain the device data, generate a second signature based on the device data, and use the second signature as the device fingerprint.

2. The device fingerprint generation method according to claim 1, wherein Generating a first signature based on the encrypted device data includes: Splice the encrypted device data with the SESSIONID of the current user to form first spliced data, and generate a first signature for the first spliced data.

3. The device fingerprint generation method according to claim 2, wherein, Generating a first signature for the first spliced data includes using the SHA1 algorithm to generate a first signature for the first spliced data; generating a second signature based on the device data includes using the SHA1 algorithm and the device data to generate a second signature.

4. The device fingerprint generation method according to claim 3, wherein Using the SHA1 algorithm and the device data to generate a second signature includes: Splice each parameter information in the device data in a preset order, and use the SHA1 algorithm to process the spliced device data to generate a second signature.

5. The device fingerprint generation method according to claim 1, wherein After encoding the second spliced data, it further includes uploading the encoded data to the server; parsing the encoded data, including making the server parse the encoded data.

6. The method for generating device fingerprints according to claim 1, wherein Verifying the first signature includes: Making the server obtain the SESSIONID of the current user using the ID of the current user, determine a third signature using the SESSIONID of the current user and the encrypted device data, verify the first signature based on the third signature. If the third signature is the same as the first signature, the verification is successful, otherwise the verification fails.

7. The method for generating device fingerprints according to claim 1, wherein Encoding the second spliced data includes: encoding the second spliced data using BASE64.

8. A device fingerprint generation device, characterized in that, Including a data acquisition module, an encoding module, and a fingerprint generation module; The data acquisition module is used to obtain device data, where the device data includes multiple of device model, advertising identifier, supplier identifier, true screen resolution, mobile phone memory size, universal unique identifier, and device identifier; The encoding module is used to encrypt the device data to obtain encrypted device data, generate a first signature based on the encrypted device data, splice the encrypted device data and the first signature to form second spliced data, and encode the second spliced data; The fingerprint generation module is configured to parse the encoded data to obtain the encrypted device data and the first signature, verify the first signature, and if the verification is successful, decrypt the encrypted device data to obtain the device data, generate a second signature based on the device data, and use the second signature as the device fingerprint.

9. An electronic device, comprising a memory and a processor, the memory storing a computer program executable by the processor, characterized in that, When the processor executes the computer program, it implements the device fingerprint generation method according to any one of claims 1 to 7.

10. A computer-readable storage medium storing a computer program, characterized in that, When the computer program is executed by the processor, it implements the device fingerprint generation method according to any one of claims 1 to 7.

Images