Bidirectional dynamic verification method in digital classroom, medium and equipment

Abstract

The invention relates to a bidirectional dynamic verification method in a digital classroom, a medium and equipment. A main code component is obtained through a teaching terminal, and the main code component comprises a main code timestamp and a certificate public key; generating a dynamic main code containing the main code component; issuing the dynamic main code to a student terminal, so that the student terminal verifies the main code timestamp and a certificate public key, and generates a dynamic auxiliary code containing a hash value of the dynamic main code; and receiving the dynamic auxiliary code and verifying the hash value of the dynamic main code, and in the process of building the digital classroom, a server platform is not needed, mutual verification is carried out by the teaching terminal and the student terminal, the dependence of the server is reduced, and safe decentralized two-way dynamic verification is realized.

Description

Technical Field

[0001] The present application relates to the technical field of educational Internet of Things, and in particular to a two-way dynamic verification method, medium, and device in a digital classroom. Background Art

[0002] In a digital classroom, one teaching terminal typically corresponds to multiple student terminals. Before establishing communication, the teaching and student terminals must verify the legitimacy of both terminals. Currently, digital classrooms often use a centralized server architecture or a fixed pairing code approach to build communication networks. Static pairing codes are often used for pairing verification. This verification requires a centralized service platform and relies on a centralized server, which can easily cause network latency and single points of failure. Furthermore, this approach is susceptible to interception and tampering, creating the risk of unauthorized access.

[0003] Based on this, a decentralized and secure verification solution is urgently needed. Summary of the Invention

[0004] To solve at least one of the above technical problems, in a first aspect, an embodiment of the present application provides a two-way dynamic verification method in a digital classroom, which is applied to a teaching terminal, and is characterized in that the method includes: obtaining a master code component, wherein the master code component includes a master code timestamp and a certificate public key; generating a dynamic master code including the master code component; issuing the dynamic master code to a student terminal so that the student terminal verifies the master code timestamp and the certificate public key, and generates a dynamic secondary code including a hash value of the dynamic master code; receiving the dynamic secondary code, and verifying the hash value of the dynamic master code.

[0005] In a second aspect, an embodiment of the present application provides another two-way dynamic verification method in a digital classroom, which is applied to a student terminal and is characterized in that the method includes: obtaining a dynamic master code issued by a teaching terminal, wherein the dynamic master code includes a master code timestamp and a certificate public key; performing time validity verification on the master code timestamp, and performing certificate validity verification based on the root certificate and the certificate public key; if all verifications are passed, generating a dynamic secondary code including a hash value of the dynamic master code; and returning the dynamic secondary code to the teaching terminal so that the teaching terminal can verify the hash value.

[0006] In a third aspect, an embodiment of the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, any of the above methods is implemented.

[0007] In a fourth aspect, an embodiment of the present application provides an electronic system, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements any of the above methods when executing the computer program.

[0008] Compared with the prior art, the embodiments of the present application have the following beneficial effects:

[0009] This application obtains a master code component through a teaching terminal, wherein the master code component includes a master code timestamp and a certificate public key; generates a dynamic master code including the master code component; publishes the dynamic master code to a student terminal so that the student terminal verifies the master code timestamp and the certificate public key and generates a dynamic secondary code including a hash value of the dynamic master code; receives the dynamic secondary code and verifies the hash value of the dynamic master code. In the process of setting up a digital classroom, no server platform is required, and the teaching terminal and the student terminal verify each other, reducing server dependence and realizing secure decentralized two-way dynamic verification. BRIEF DESCRIPTION OF THE DRAWINGS

[0010] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following briefly introduces the drawings required for use in the embodiments or descriptions of the prior art. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0011] Figure 1 A flowchart of a two-way dynamic verification method in a digital classroom provided by an embodiment of the present application;

[0012] Figure 2 A flowchart of another bidirectional dynamic verification method in a digital classroom provided by an embodiment of the present application;

[0013] Figure 3 A timing diagram of bidirectional verification between a teaching terminal and a learning terminal provided in this application;

[0014] Figure 4 A schematic diagram of the structure of an electronic system provided in one embodiment of the present application. DETAILED DESCRIPTION

[0015] In the following description, specific details such as specific system structures and techniques are provided for purposes of illustration rather than limitation to facilitate a thorough understanding of the embodiments of the present application. However, it will be apparent to those skilled in the art that the present application may be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, devices, circuits, and methods are omitted to avoid obscuring the description of the present application with unnecessary detail.

[0016] It should be understood that when used in the present specification and the appended claims, the term "comprising" indicates the presence of described features, integers, steps, operations, elements and / or components, but does not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components and / or collections thereof.

[0017] It will also be understood that the term "and / or" used in this specification and the appended claims refers to and includes any and all possible combinations of one or more of the associated listed items.

[0018] As used in this specification and the appended claims, the term "if" can be interpreted as "when" or "upon" or "in response to determining" or "in response to detecting," depending on the context. Similarly, the phrase "if it is determined" or "if [described condition or event] is detected" can be interpreted as meaning "upon determination" or "in response to determining" or "upon detection of [described condition or event]" or "in response to detecting [described condition or event]," depending on the context.

[0019] In addition, in the description of the present application specification and the appended claims, the terms "first", "second", "third", etc. are only used to distinguish the descriptions and cannot be understood as indicating or implying relative importance.

[0020] References to "one embodiment" or "some embodiments" in this specification mean that a particular feature, structure, or characteristic described in conjunction with that embodiment is included in one or more embodiments of the present application. Thus, phrases such as "in one embodiment," "in some embodiments," "in other embodiments," and "in other embodiments" appearing in various places in this specification do not necessarily refer to the same embodiment, but rather mean "one or more but not all embodiments," unless otherwise specifically emphasized. The terms "comprise," "include," "have," and variations thereof all mean "including but not limited to," unless otherwise specifically emphasized.

[0021] For ease of understanding, the technical solution of this application will be described in detail below with reference to the accompanying drawings.

[0022] The present application provides a two-way dynamic verification method in a digital classroom, which can be optionally applied to, but not limited to, the construction of a digital multimedia classroom. Specifically, it includes a teaching terminal and a student terminal. The teaching terminal is a teaching terminal device used by teachers for teaching; the student terminal is a learning terminal device used by students for learning. The terminal device can be an electronic device such as a mobile phone, a personal computer, a tablet, etc. A teaching terminal usually needs to correspond to one or more student terminals, and a corresponding communication link needs to be established between the two after verifying the legitimacy, thereby realizing digital teaching.

[0023] Based on this, this application provides a decentralized and secure two-way verification solution, specifically including teaching terminals and student terminals.

[0024] In the first aspect, the present application provides a two-way dynamic verification method in a digital classroom, which is applied to a teaching terminal, such as Figure 1 As shown, Figure 1 This is a flow chart of a two-way dynamic verification method in a digital classroom provided by an embodiment of the present application, the method comprising:

[0025] S101: Obtain a master code component, wherein the master code component includes a master code timestamp and a certificate public key.

[0026] The master code timestamp can use IEEE 1588 Precision Time Protocol (PTP) with an accuracy of ±10ns.

[0027] The certificate in this application refers to the CA certificate of the organization providing the digital classroom. The public key in the certificate is the public key contained in the certificate, which is tied to the entity's identity. The certificate appends user information and the CA's signature after the public key.

[0028] Correspondingly, the root certificate of the institution is pre-stored on the student terminal, and the root certificate and the certificate public key can be used together to verify that the certificate is issued by the institution.

[0029] In other words, the certificate public key can be permanent or temporary. In this application, a temporary public key can be obtained by calling the chip to generate a temporary key pair, and this temporary public key is used as the certificate public key. Its usage period is the same as that of the master code (for example, it is valid for 10 minutes). This dynamic public key can achieve forward secrecy.

[0030] In addition, the dynamic master code may also include other information, for example, a session identifier (the session identifier is used to identify the creation number of the digital classroom), a version number, metadata (such as the master code validity period, encoding method), etc.

[0031] In one embodiment, the master code component may also include a session identifier. This session identifier is pre-generated by obtaining the unique device identifier of the teaching terminal and generating a random number; then generating the session identifier based on the unique device identifier and the random number. The session identifier can be decoded to obtain the unique device identifier of the teaching terminal. For example, the HMAC-SHA256 algorithm is used to generate the session identifier based on the unique device identifier and the quantum random number. After obtaining the session identifier, the learning terminal can decode the unique device identifier to verify the legitimacy of the dynamic master code.

[0032] S102: Generate a dynamic master code including the master code component.

[0033] Pre-set logic may be called to generate the dynamic master code based on the master code component.

[0034] For example, a pseudo code for generating a dynamic master code may be as follows:

[0035] {

[0036] "Version Number":"1.0",

[0037] "Primary code timestamp": "2023-07-20T14:23:45.678Z",

[0038] "Session Identifier":"a1b2c3d4e5",

[0039] "Public key":"MFkwEwYHKoZIzj0CAQY...",

[0040] "metadata":{

[0041] "Encoding": "AES-GCM",

[0042] "Validity period": 300 / / Unit: seconds

[0043] }.

[0044] S103: issuing the dynamic master code to the student terminal.

[0045] The release method can be a display method or a broadcast method. For example, the dynamic master code can be converted into a barcode (one-dimensional barcode or two-dimensional barcode) and displayed so that the student terminal can scan it; or it can be broadcast to the surrounding student terminals via a near-field wireless broadcast signal (including Bluetooth broadcast packets, Zigbee network, Wi-Fi, etc.).

[0046] Upon receiving the dynamic master code, the student terminal verifies its legitimacy. This legitimacy verification includes verifying the validity of the timestamp and the certificate based on the certificate's public key. Once both verifications are successful, the student terminal performs a hash calculation and signature based on the dynamic master code, generates a dynamic secondary code containing the hash value of the dynamic master code, and transmits this dynamic secondary code back to the teaching terminal.

[0047] S104: Receive the dynamic secondary code and verify the hash value of the dynamic primary code.

[0048] If the dynamic secondary code contains the signature of the learning terminal (that is, the dynamic secondary code contains a hash value and a signature of the hash value), the hash value verification method can obtain the hash value after verifying the signature and locally calculate the hash value of the dynamic primary code to perform consistency verification.

[0049] In one embodiment, when the hash value of the dynamic master code is pre-signed by the device private key of the student terminal, the verification of the hash value of the dynamic master code includes: decrypting the signature using the corresponding device public key, performing consistency verification on the decrypted hash value; and recording the verification status of the student terminal.

[0050] The student terminal's device private key uniquely identifies the student terminal. After consistency verification passes, the verification status of the student terminal (verified or unverified) is recorded. If the student terminal has already been verified, no further verification is performed. This prevents replay attacks (i.e., multiple verification requests using the same dynamic secondary code) that may occur after the dynamic secondary code is leaked.

[0051] In one embodiment, before verifying the hash value of the dynamic primary code, event validity verification can also be performed. Specifically, the secondary code timestamp included in the dynamic secondary code is obtained; time synchronization verification is performed between the secondary code timestamp and the primary code timestamp. For example, the difference between the secondary code timestamp and the primary code timestamp is determined. If the difference does not exceed the preset validity period, the time synchronization verification passes; otherwise, it fails. Since the solution of this application is typically implemented in a decentralized, face-to-face offline scenario, this time synchronization verification can effectively prevent the leakage of the primary or secondary code, thereby improving verification security.

[0052] A master code component is obtained through a teaching terminal, wherein the master code component includes a master code timestamp and a certificate public key; a dynamic master code including the master code component is generated; the dynamic master code is issued to a student terminal so that the student terminal can verify the master code timestamp and the certificate public key and generate a dynamic secondary code including a hash value of the dynamic master code; the dynamic secondary code is received and the hash value of the dynamic master code is verified. In the process of setting up a digital classroom, no server platform is required, and mutual verification is performed by the teaching terminal and the student terminal, thereby reducing server dependence and achieving secure decentralized two-way dynamic verification.

[0053] The above describes the method for verifying the teaching terminal. Correspondingly, in the second aspect, the present application also provides another two-way dynamic verification method in a digital classroom, which is applied to a student terminal with a pre-stored root certificate, such as Figure 2 As shown, Figure 2 This is a flow chart of another bidirectional dynamic verification method in a digital classroom provided by an embodiment of the present application, the method comprising:

[0054] S201: Acquire a dynamic master code issued by a teaching terminal, wherein the dynamic master code includes a master code timestamp and a certificate public key.

[0055] S202: Verify the time validity of the master code timestamp, and verify the certificate validity based on the root certificate and the certificate public key.

[0056] The time validity verification of the master code timestamp may be performed by determining the difference between the current time and the master code timestamp. If the difference is less than the validity period, the verification is successful.

[0057] The pre-buried root certificate contains key data such as the authorization certificate information, public key, validity period, etc. The pre-buried root certificate and certificate public key can be used to verify the signature contained in the dynamic master code (signed by the teaching terminal device based on the private key that matches the certificate public key).

[0058] S203: If the verification is successful, generate a dynamic secondary code including the hash value of the dynamic primary code.

[0059] In addition to the hash value of the dynamic primary code, the dynamic secondary code may also contain other relevant information, such as a unique device identifier, a secondary code timestamp, and the like.

[0060] S204: Send back the dynamic secondary code to the teaching terminal so that the teaching terminal can verify the hash value.

[0061] Because this backhaul is offline near-field, it takes into account the potential differences in signal strength between devices. The signal strength between the student terminal and the teaching terminal is determined. When the signal strength exceeds a preset threshold (e.g., 70dBm), the dynamic secondary code is backhauled via a low-speed wireless personal area network. Otherwise, the dynamic secondary code is relayed to the teaching terminal via adjacent student terminals. This improves the stability of the dynamic secondary code backhaul.

[0062] In one embodiment, the dynamic secondary code, which includes the hash value of the dynamic primary code, may include other information. For example, the dynamic secondary code generation logic may include: combining the hardware fingerprint (such as the TPM chip ID) with the firmware version hash value to generate a unique device identifier for the student terminal; using the BLAKE3 algorithm to calculate the hash value of the dynamic primary code; signing the hash value using the device private key and appending the secondary code timestamp. Signing the hash value using the device private key can be performed in a trusted execution environment or secure enclave, further improving security.

[0063] The pseudo code form of its secondary code data structure can be shown as follows:

[0064] Dynamic sub-code {

[0065] Learning terminal's unique device identifier = 1; / / 32-byte device fingerprint

[0066] Master code hash value = 2; / / 32 bytes BLAKE3 output

[0067] Signature of hash = 3; / / 64-byte ECDSA signature

[0068] Secondary code timestamp = 4; / / UNIX timestamp after synchronization

[0069] }

[0070] After both parties have verified their identities, a session key is generated between the teaching and learning terminals, and channel parameters are assigned, establishing a communication channel. End-to-end encryption (such as AES-256) is used across the communication channel to enhance communication security.

[0071] In the initial stage of establishing the communication channel, a star topology centered on the teaching terminal can be adopted. As more and more learning terminals are connected, it can automatically switch to the Chord distributed hash table structure in the expansion stage, thereby improving the scalability of the system while maintaining a decentralized structure.

[0072] In one embodiment, after the teaching terminal and the student terminal have completed two-way verification, the teaching terminal can establish a communication channel with the student terminal. At the same time, the student terminal is bound to each other on site and the location information, and obtains a binding certificate, and uploads the location information to the teaching terminal by carrying the binding certificate. The teaching terminal can receive the binding certificate uploaded by the student terminal, wherein the binding certificate contains the location information of the student terminal, and generates a seating chart in the digital classroom based on the location information, which is convenient for future examinations, roll calls, sign-ins, etc. For example, the binding method of the student terminal and the location information can be implemented based on the numbering information contained in the seat itself. The classroom seats on site can contain corresponding seat numbers (4 rows of 6 seats, or the 11th seat, etc.), and the student terminal can be directly bound to the numbering of the classroom seats, thereby carrying the numbering information to upload the teaching terminal after binding.

[0073] Furthermore, in one embodiment, when a teaching terminal and multiple learning terminals have successfully built a digital classroom network, and a new learning terminal wants to join to expand the network, dynamic verification can be performed in the following manner:

[0074] The successfully verified first learning terminal transmits its generated first dynamic secondary code to the second learning terminal to be connected. The second learning terminal verifies the timestamp contained in the first dynamic secondary code. If the verification is successful, the second learning terminal signs the dynamic secondary code, generates a second dynamic secondary code containing the signature, and returns the second dynamic secondary code to the first learning terminal. The first learning terminal then returns the second dynamic secondary code to the teaching terminal for verification.

[0075] In this way, if the teaching terminal has started teaching and another second learning terminal wants to join the digital classroom network, the teaching terminal does not need to display the dynamic master code again. Instead, the first learning terminal that has passed the verification will send the relevant information containing the dynamic master code to the second learning terminal that wants to join. The second learning terminal will verify the timestamp to ensure that the dynamic master code is still valid.

[0076] At the same time, the first learning terminal has been verified, which also ensures the accuracy of the hash value of the dynamic primary code contained in the first dynamic secondary code. The first learning terminal then forwards the second dynamic secondary code containing the signature of the second learning terminal to the teaching terminal, which also performs time validity verification and hash value consistency verification. This verification can be performed in the background of the teaching terminal. That is, during expansion, if the teaching terminal has already entered the teaching state, there is no need to switch to the foreground at this time. Verification of the newly connected second learning terminal is also completed in the background, which is more convenient.

[0077] In addition, in the case of this dynamic expansion, when the second learning terminal generates the second dynamic secondary code, it can also include the binding certificate in the second dynamic secondary code, so that the teaching terminal can obtain the location information of the second learning terminal from the second dynamic secondary code after verification, and compile it into the seating table based on the location information of the second learning terminal, thereby improving the efficiency of expansion.

[0078] In order to make the two-way verification of this application clearer, this application also provides a more specific example. Figure 3 As shown, Figure 3 A timing diagram of bidirectional verification between a teaching terminal and a learning terminal provided in this application, specifically including:

[0079] S301, the teaching terminal obtains components internally and generates a dynamic master code;

[0080] S302, the teaching terminal multimodally publishes a dynamic master code to the learning terminal;

[0081] S303, after receiving the dynamic master code, the learning terminal performs root certificate verification and timestamp verification;

[0082] S304, after the learning terminal passes the verification, a dynamic secondary code is generated;

[0083] S305, the learning terminal returns the secondary code;

[0084] S306, the teaching terminal performs timestamp verification, device signature verification, and hash value verification;

[0085] S307: After the teaching terminal passes the verification, a communication channel is established with the learning terminal to form a decentralized digital classroom network.

[0086] Through the above-mentioned method, in an offline near-field situation, the teaching terminal and the learning terminal complete mutual verification without the need for a service platform and establish a communication channel, thereby realizing decentralized security verification in the construction of a digital classroom.

[0087] In the third aspect, Figure 4 This is a schematic diagram of the structure of an electronic system provided in one embodiment of the present application. Figure 4 As shown, the electronic system 4 of this embodiment includes: at least one processor 40 ( Figure 4 Only one is shown), a memory 41 and a computer program 42 stored in the memory 41 and executable on at least one processor 40, the processor 40 executes the computer program 42 to implement the above Figure 3 The steps in the method embodiment, or the implementation of the above Figure 3 Functions of each module / unit in the device embodiment.

[0088] The electronic system 4 can be a computing device such as a desktop computer, a notebook, a PDA, or a cloud server. The electronic system 4 can include but is not limited to a processor 40 and a memory 41. It will be understood by those skilled in the art that Figure 4 This is only an example of the electronic system 4 and does not constitute a limitation on the electronic system 4. It may include more or fewer components than shown in the figure, or a combination of certain components, or different components. For example, it may also include input and output devices, network access devices, etc.

[0089] The processor 40 may be a central processing unit (CPU), or other general-purpose processors, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), an off-the-shelf programmable gate array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor.

[0090] In some embodiments, the memory 41 may be an internal storage unit of the electronic system 4, such as a hard disk or memory of the electronic system 4. In other embodiments, the memory 41 may also be an external storage device of the electronic system 4, such as a plug-in hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, etc. equipped on the electronic system 4. Furthermore, the memory 41 may include both an internal storage unit of the electronic system 4 and an external storage device. The memory 41 is used to store an operating system, application programs, a boot loader, data, and other programs, such as the program code of a computer program. The memory 41 may also be used to temporarily store data that has been output or is about to be output.

[0091] In a fourth aspect, an embodiment of the present application further provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, the steps in the above-mentioned method embodiments can be implemented.

[0092] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the present application implements all or part of the processes in the above-mentioned embodiment method, which can be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a computer-readable storage medium, and the computer program, when executed by the processor, can implement the steps of the above-mentioned various method embodiments. Wherein, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form. The computer-readable medium may include at least: any entity or device capable of carrying the computer program code to an electronic system, a recording medium, a computer memory, a read-only memory (ROM), a random access memory (RAM), an electric carrier signal, a telecommunication signal and a software distribution medium. For example, a USB flash drive, a mobile hard disk, a magnetic disk or an optical disk.

[0093] In the above embodiments, the description of each embodiment has its own focus. For parts that are not described or recorded in detail in a certain embodiment, reference can be made to the relevant description of other embodiments.

[0094] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0095] In the embodiments provided in this application, it should be understood that the disclosed devices / equipment and methods can be implemented in other ways. For example, the device / equipment embodiments described above are merely schematic. For example, the division of the modules or units is merely a logical function division. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0096] Units described as separate components may or may not be physically separate, and components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of these units may be selected to achieve the purpose of this embodiment according to actual needs.

[0097] The above-mentioned electronic system and storage medium are created based on the above-mentioned retrieval problem optimization method, and will not be described in detail here. The above embodiments are only used to illustrate the technical solutions of this application, rather than to limit them. Although this application is described in detail with reference to the above-mentioned embodiments, a person of ordinary skill in the art should understand that it is still possible to modify the technical solutions described in the above-mentioned embodiments, or to replace some of the technical features therein by equivalents. These modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of this application, and should all be included in the scope of protection of this application.

Claims

1. A two-way dynamic verification method in a digital classroom, applied to a teaching terminal, characterized in that: The method comprises: Obtaining a master code component, wherein the master code component includes a master code timestamp and a certificate public key; generating a dynamic master code including the master code component; issuing the dynamic master code to a student terminal so that the student terminal can verify the master code timestamp and certificate public key and generate a dynamic secondary code containing a hash value of the dynamic master code; The dynamic secondary code is received, and the hash value of the dynamic primary code is verified.

2. The verification method according to claim 1, wherein: The issuing of the dynamic master code to the student terminal includes: Display the dynamic master code to the student terminal in coded form; or, The dynamic master code is broadcasted using a near-field signal.

3. The method according to claim 1, wherein After the bidirectional verification of the teaching terminal and the student terminal is completed, the method further includes: receiving a binding certificate uploaded by the student terminal, wherein the binding certificate includes location information of the student terminal; A seating chart in the digital classroom is generated according to the location information.

4. The method according to claim 1, wherein When the hash value of the dynamic master code is pre-signed by the device private key of the student terminal, the verification of the hash value of the dynamic master code includes: Decrypt the signature using the corresponding device public key and verify the consistency of the decrypted hash value; Record the verification status of the student terminal.

5. The method according to claim 4, wherein: Before verifying the hash value of the dynamic master code, the method further includes: Obtaining the secondary code timestamp contained in the dynamic secondary code; The secondary code timestamp and the primary code timestamp are verified for time synchronization.

6. A two-way dynamic verification method in a digital classroom, applied to a student terminal with a pre-stored root certificate, characterized in that: The method comprises: Obtaining a dynamic master code issued by the teaching terminal, wherein the dynamic master code includes a master code timestamp and a certificate public key; Verify the validity of the master code timestamp and the certificate validity based on the root certificate and certificate public key; If all verifications are successful, a dynamic secondary code containing the hash value of the dynamic primary code is generated; The dynamic secondary code is transmitted back to the teaching terminal so that the teaching terminal can verify the hash value.

7. The method according to claim 6, wherein: Generating a dynamic secondary code including a hash value of the dynamic primary code includes: Generate a hash value of the dynamic master code; Obtaining the unique device identification and device private key of the student terminal; Signing the hash value of the dynamic master code using the device private key in a trusted execution environment; A dynamic secondary code is generated that includes the unique device identifier, the hash value of the dynamic primary code, the signature, and the secondary code timestamp.

8. The method of claim 6, wherein: Transmitting the dynamic secondary code back to the teaching terminal so that the teaching terminal can verify the hash value includes: Determining the signal strength of communication between the student terminal and the teaching terminal; When the signal strength is higher than a preset threshold, the dynamic secondary code is transmitted back through a low-speed wireless personal area network; otherwise, the signal is transmitted back through other adjacent student terminals to the teaching terminal.

9. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the method according to any one of claims 1 to 8 is implemented.

10. An electronic system comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein: When the processor executes the computer program, the method according to any one of claims 1 to 8 is implemented.

Images