Security identifier generation method and device, security identifier application method and device and computer readable storage medium

Abstract

The invention discloses a security identifier generation method and device, a security identifier application method and device and a computer readable storage medium, and the method comprises the steps: combining two randomly generated universal unique identification codes into a reference identifier; obtaining production information and an equipment signature of the equipment, and generating an information abstract according to an international mobile equipment identification code of the equipment, current time and the production information; identifying writing and / or reading of the production information, the equipment signature and the information abstract through front-section characters of the reference identifier; and according to the production information and the information abstract, carrying out alternate replacement on the rear-segment characters of the reference identifier, and generating the security identifier of the equipment. According to the invention, a more effective security identifier generation and application scheme is realized, the security, the aggregability and the anti-counterfeiting capability of the equipment security identifier are improved on the premise of meeting the compliance, and the validity of verifying the security identifier is enhanced.

Description

Technical Field

[0001] This invention relates to the field of network security technology, and in particular to a method, device, and computer-readable storage medium for generating and applying security identifiers. Background Technology

[0002] Currently, in order to comply with national personal data protection laws and overseas laws such as GDPR (General Data Protection Regulation), mobile device manufacturers are not allowed to report data such as the device's IMEI (International Mobile Equipment Identity) to internet services. Therefore, mobile device manufacturers usually use solutions such as OAID (Open Anonymous Identifier) ​​and VAID (Vender Anonymous Device Identity), which means that the identifier reported by a device is the same for a certain period of time.

[0003] However, the above solution has some problems: First, security is not high. Because OAID and VAID remain unchanged for a long period of time, there is still a compliance risk of tracking devices based on them. Second, the aggregation is poor. Since OAID, VAID and device IMEI are not directly related, the reported information lacks aggregation. Third, anti-counterfeiting measures are ineffective. Since there is no pattern in OAID and VAID data, the cost of counterfeiting is low, and any tool can be used to simulate the data reported by mobile phones and other devices. Therefore, how to improve the security, cohesion, and anti-counterfeiting capabilities of existing equipment security labels has become an urgent technical problem to be solved. Summary of the Invention

[0004] In order to overcome the shortcomings of the prior art, the present invention aims to provide a method, device and computer-readable storage medium for generating and applying security labels, so as to solve the problems of low security, poor aggregation and ineffective anti-counterfeiting measures of current device security labels.

[0005] This invention proposes a method for generating and applying security identifiers, the method comprising: Combine two randomly generated universally unique identifiers into a baseline identifier; Obtain the equipment's production information and equipment signature, and generate a message digest based on the equipment's International Mobile Equipment Identity (IMEI), current time, and the production information; The writing and / or reading of the production information, the equipment signature, and the information digest are identified by the first character of the reference identifier; The safety identifier of the device is generated by replacing the last character of the baseline identifier with a spaced-out replacement based on the production information and the information digest.

[0006] Optionally, generating a message digest based on the device's International Mobile Equipment Identity (IMEI), current time, and production information specifically includes: The International Mobile Equipment Identity (IMEI), the current time, and the production information are calculated using a preset secure hash algorithm. According to the preset summary extraction starting position, one character is extracted every eight characters in the calculation result, for a total of eight characters, as the information summary.

[0007] Optionally, the step of identifying the writing and / or reading of the production information, the device signature, and the information digest using the first character of the reference identifier specifically includes: Determine the first starting position of the production information in the safety label; The last three bits of the first character of the reference identifier are combined with the first three bits of the second character to form a numerical value, which is used to identify the first starting position.

[0008] Optionally, the step of identifying the writing and / or reading of the production information, the device signature, and the information digest using the first character of the reference identifier specifically includes: Determine the first reading order of the production information in the security identifier; The first reading order is identified by the last bit of the third character of the reference identifier.

[0009] Optionally, the step of identifying the writing and / or reading of the production information, the device signature, and the information digest using the first character of the reference identifier specifically includes: Determine the second reading order of the device signature in the security identifier; The second reading order is identified by the penultimate bit of the third character of the reference identifier.

[0010] Optionally, the step of identifying the writing and / or reading of the production information, the device signature, and the information digest using the first character of the reference identifier specifically includes: Determine the second starting position of the message digest in the security identifier; The last three bits of the fourth character of the reference identifier are used to identify the second starting position.

[0011] Optionally, the step of replacing the last characters of the baseline identifier with alternating spaces based on the production information and the information digest to generate the security identifier of the device specifically includes: The production information is placed before the information digest, and the latter part of the base identifier is replaced with alternating characters by combining the production information and the information digest. During the replacement process, if the character to be replaced is zero, no replacement is performed, and the first, second, third, and fourth characters of the reference identifier are skipped.

[0012] Optionally, the generation of the security identifier for the device then includes: During the verification phase of the security identifier, the time information of when the device reported the security identifier is obtained; The security identifier is parsed based on the time information, the production information and the information digest are extracted, and compared with the preset original information to determine the legality of the security identifier.

[0013] The present invention also proposes a device for generating and applying security identifiers, the device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program, when executed by the processor, implements the steps of the security identifier generation and application method as described in any of the preceding claims.

[0014] The present invention also proposes a computer-readable storage medium storing a security identifier generation and application program, which, when executed by a processor, implements the steps of the security identifier generation and application method as described in any of the preceding claims.

[0015] The present invention provides a method, device, and computer-readable storage medium for generating and applying security identifiers. This involves combining two randomly generated universally unique identifiers into a base identifier; acquiring the device's production information and device signature; generating a message digest based on the device's International Mobile Equipment Identity (IMEI), current time, and the production information; identifying the writing and / or reading of the production information, device signature, and message digest using the first character of the base identifier; and generating the device's security identifier by replacing the last character of the base identifier with alternating characters based on the production information and message digest. This achieves a more efficient solution for generating and applying security identifiers, improving the security, aggregation, and anti-counterfeiting capabilities of device security identifiers while meeting compliance requirements, and enhancing the effectiveness of security identifier verification. Attached Figure Description

[0016] The present invention will be further described below with reference to the accompanying drawings and embodiments. In the accompanying drawings: Figure 1 This is a flowchart of the first embodiment of the method for generating and applying security identifiers according to the present invention; Figure 2 This is a flowchart of the second embodiment of the method for generating and applying security identifiers according to the present invention; Figure 3 This is a flowchart of the third embodiment of the method for generating and applying security identifiers according to the present invention; Figure 4 This is a flowchart of the fourth embodiment of the method for generating and applying security identifiers according to the present invention; Figure 5 This is a flowchart of the fifth embodiment of the method for generating and applying security identifiers of the present invention; Figure 6 This is a flowchart of the sixth embodiment of the method for generating and applying security identifiers according to the present invention; Figure 7 This is a flowchart of the seventh embodiment of the method for generating and applying security identifiers of the present invention; Figure 8 This is a flowchart of the eighth embodiment of the method for generating and applying security identifiers according to the present invention. Detailed Implementation

[0017] It should be understood that the specific embodiments described herein are for illustrative purposes only and are not intended to limit the scope of the invention.

[0018] In the following description, the use of suffixes such as "module," "part," or "unit" to denote elements is solely for the purpose of illustrative purposes and has no specific meaning in itself. Therefore, "module," "part," or "unit" may be used interchangeably.

[0019] Example 1 Figure 1 This is a flowchart of the first embodiment of the method for generating and applying a security identifier according to the present invention. A method for generating and applying a security identifier, the method comprising: S1. Combine the two randomly generated universally unique identifiers into a base identifier; S2. Obtain the equipment's production information and equipment signature, and generate a message digest based on the equipment's International Mobile Equipment Identity (IMEI), current time, and production information; S3. The writing and / or reading of the production information, the equipment signature, and the information digest are identified by the first character of the reference identifier; S4. Replace the last character of the baseline identifier with a spaced-out replacement based on the production information and the information digest to generate the safety identifier of the device.

[0020] In this embodiment, the reference identifier is randomly generated. The assignment, modification or replacement of the reference identifier only applies to a portion of the characters of the reference identifier, not all of them. That is, the unchanged part still maintains a certain degree of randomness, while the changed part is generated and modified by a preset method based on the device-related information. Therefore, a certain degree of aggregation can also be guaranteed.

[0021] In this embodiment, the device's production information and device signature are obtained, and a message digest is generated based on the device's International Mobile Equipment Identity (IMEI), current time, and production information. The writing and / or reading of the production information, device signature, and message digest are identified by the first character of the base identifier. The last character of the base identifier is replaced with alternating characters based on the production information and message digest to generate the device's security identifier. It is evident that in this embodiment, the ID field in the production information table of mobile phones and other devices is used as a component of the device security identifier, ensuring data uniqueness and external untraceability. Furthermore, in this embodiment, the IMEI (International Mobile Equipment Identity) of mobile phones and other devices is combined with the production ID to perform a SHA (Secure Hash Algorithm) to generate immutable message digest information. Furthermore, in this embodiment, the security identifier of mobile phones and other devices is regenerated once or multiple times according to a preset period (e.g., daily) to improve security. Furthermore, in this embodiment, a preset algorithm ensures that the security identifier can be traced back to the corresponding device within the manufacturer, further improving data aggregation.

[0022] The beneficial effects of this embodiment are as follows: It combines two randomly generated universally unique identifiers into a base identifier; obtains the device's production information and device signature, and generates a message digest based on the device's International Mobile Equipment Identity (IMEI), current time, and the production information; identifies the writing and / or reading of the production information, device signature, and message digest using the first character of the base identifier; and generates the device's security identifier by replacing the last character of the base identifier with alternating characters based on the production information and message digest. This achieves a more efficient security identifier generation and application scheme, improving the security, aggregation, and anti-counterfeiting capabilities of the device security identifier while meeting compliance requirements, and enhancing the effectiveness of security identifier verification.

[0023] Example 2 Figure 2This is a flowchart of the second embodiment of the method for generating and applying security identifiers of the present invention. Based on the above embodiment, the step of generating an information digest based on the International Mobile Equipment Identity (IMEI) of the device, the current time, and the production information specifically includes: S21. Calculate the International Mobile Equipment Identity (IMEI), the current time, and the production information according to a preset secure hash algorithm; S22. Extract one character every eight characters in the calculated result according to the preset summary extraction starting position, for a total of eight characters, as the information summary.

[0024] In this embodiment, the device information digest is a component of the device's security identifier. The information digest is generated by first performing SHA256 calculation on the device IMEI + production information table ID + current date 0:00 timestamp, and then extracting 1 character every 8 characters according to the set digest extraction start position, that is, extracting 8 characters from the SHA256 result as the device information digest.

[0025] The beneficial effect of this embodiment is that it calculates the International Mobile Equipment Identity (IMEI), the current time, and the production information using a preset secure hash algorithm; and extracts one character every eight characters from the calculated result at a preset digest extraction start position, for a total of eight characters, as the information digest. This makes the security identifier correlated with the information digest, allowing subsequent verification to use the reported time as a parsing condition, thus improving the effectiveness of the verification.

[0026] Example 3 Figure 3 This is a flowchart of the third embodiment of the method for generating and applying security identifiers of the present invention. Based on the above embodiment, the step of identifying the production information, the device signature, and the writing and / or reading of the information digest through the first character of the reference identifier specifically includes: S31. Determine the first starting position of the production information in the safety sign; S32. Combine the last three bits of the first character of the reference identifier with the first three bits of the second character to form a numerical value, which is used to identify the first starting position.

[0027] In this embodiment, the device security identifier is designed as a 64-bit string. The base information of this 64-bit string is composed of two 32-bit UUIDs (Universally Unique Identifiers), thereby ensuring the randomness of the data. The last 3 bits of the first character of the identifier and the first 3 bits of the second character form a value, which is used to indicate the starting position of the mobile device production information table ID in the security identifier.

[0028] The beneficial effect of this embodiment is that by determining the first starting position of the production information in the security identifier, and combining the last three bits of the first character of the reference identifier with the first three bits of the second character to form a value, the starting position of subsequent interval replacements is clearly defined, facilitating search, location, and identifier verification in subsequent application stages.

[0029] Example 4 Figure 4 This is a flowchart of the fourth embodiment of the method for generating and applying security identifiers of the present invention. Based on the above embodiment, the step of identifying the production information, the device signature, and the writing and / or reading of the information digest through the first character of the reference identifier specifically includes: S41. Determine the first reading order of the production information in the safety identifier; S42. The first reading order is identified by the last bit of the third character of the reference identifier.

[0030] In this embodiment, the last bit of the third character of the security identifier is used to indicate the reading order of the production information table ID in the security identifier, with 0 indicating ascending order and 1 indicating descending order.

[0031] The beneficial effect of this embodiment is that by determining the first reading order of the production information in the security identifier, and by identifying the first reading order through the last bit of the third character of the reference identifier, the subsequent reading order of this verification content is clarified, facilitating subsequent search, location, and identifier verification in the application stage.

[0032] Example 5 Figure 5 This is a flowchart of the fifth embodiment of the method for generating and applying security identifiers of the present invention. Based on the above embodiment, the step of identifying the production information, the device signature, and the writing and / or reading of the information digest through the first character of the reference identifier specifically includes: S43. Determine the second reading order of the device signature in the security identifier; S44. The second reading order is identified by the second-to-last bit of the third character of the reference identifier.

[0033] In this embodiment, the second-to-last bit of the third character of the security identifier is used to indicate the reading order of the device signature written into the security identifier, with 0 indicating ascending order and 1 indicating descending order.

[0034] The beneficial effect of this embodiment is that by determining the second reading order of the device signature in the security identifier, and by identifying the second reading order through the second-to-last bit of the third character of the reference identifier, the order of reading the verification content in the subsequent stages is clarified, which facilitates the search, location and identification verification in the subsequent application stage.

[0035] Example 6 Figure 6 This is a flowchart of the sixth embodiment of the method for generating and applying security identifiers of the present invention. Based on the above embodiment, the step of identifying the production information, the device signature, and the writing and / or reading of the information digest through the first character of the reference identifier specifically includes: S45. Determine the second starting position of the information digest in the security identifier; S46. Mark the second starting position with the last three bits of the fourth character of the reference identifier.

[0036] In this embodiment, the last three bits of the fourth character of the security identifier indicate the starting position for extracting the device information digest.

[0037] The beneficial effect of this embodiment is that by determining the second starting position of the information digest in the security identifier, and marking the second starting position with the last three bits of the fourth character of the reference identifier, the reading order of the subsequent reading of this verification content is clarified, facilitating subsequent search, location, and identifier verification in the application stage.

[0038] Example 7 Figure 7 This is a flowchart of the seventh embodiment of the method for generating and applying a security identifier according to the present invention. Based on the above embodiment, the step of replacing the last characters of the baseline identifier with alternating positions according to the production information and the information digest to generate the security identifier of the device specifically includes: S47. Place the production information before the information digest, and replace the last character of the reference identifier with the production information and the information digest together by alternating positions; S48. During the replacement process, if the character to be replaced is zero, no replacement is performed, and the first, second, third, and fourth characters of the reference identifier are skipped.

[0039] In this embodiment, the ID field in the production information table of mobile phones and other devices is of type Long, and the maximum length of the string is 19 characters. The ID is converted into a string and the middle part of the 64-bit security identifier is replaced. Furthermore, the replacement method used in this embodiment is to replace every other character. When replacing, if the corresponding ID character is found to be 0, no replacement is performed, thereby maintaining the UUID character in the security identifier to ensure the randomness of the data to the greatest extent.

[0040] In this embodiment, the eight characters extracted from the SHA256 result are used as the device information digest. These eight characters are then placed after the device ID, still replacing each character every other character. The reading order also supports both ascending and descending order. It is easy to see that since the information digest part in the security identifier also incorporates the timestamp of the day, the difficulty of data forgery is further increased.

[0041] Furthermore, in this embodiment, when replacing the device security character with the device ID and message digest, the first, second, third, and fourth characters should be skipped to avoid disrupting the data generation rules.

[0042] The beneficial effect of this embodiment is that by placing the production information before the information digest, the production information and the information digest are used together to replace the last characters of the base identifier with alternating positions. During the replacement process, if the character to be replaced is zero, no replacement is performed, and the first, second, third, and fourth characters of the base identifier are skipped. This results in the generated security identifier containing a portion of the device information digest and the device ID value.

[0043] Example 8 Figure 8 This is a flowchart of the eighth embodiment of the method for generating and applying the security identifier of the present invention. Based on the above embodiment, the generation of the security identifier of the device includes: S51. During the verification phase of the security identifier, obtain the time information of the device reporting the security identifier; S52. Parse the security identifier based on the time information, extract the production information and the information digest, and compare them with the preset original information to determine the legality of the security identifier.

[0044] In this embodiment, according to the above mechanism, the generated device security identifier contains a portion of the device information digest and the device ID value. Therefore, the internet services of mobile phone and other device manufacturers can combine the generated information table to implement a method for verifying the authenticity of device information. Then, based on the generation rules of the security identifier and the timestamp value of the date at 0:00 when the data was reported, the security identifier is parsed to extract the information digest and the device ID. Furthermore, in this embodiment, for the verification stage, it is only necessary to compare it with the complete SHA256 digest and the device ID. If both match, it indicates that the security identifier is legitimate.

[0045] Furthermore, in this embodiment, the security identifier of devices such as mobile phones is changed on a daily cycle. That is, a unique security identifier is regenerated every day according to the above-mentioned generation rules, so as to shorten the time cycle of device identifiers and improve their security.

[0046] Furthermore, by combining the above scheme with elements such as timestamp, device IMEI, and device production ID, a security identifier for each device is generated, ensuring that the security identifier produced for each device is absolutely unique.

[0047] The beneficial effect of this embodiment is that, during the verification phase of the security identifier, the time information of the security identifier reported by the device is obtained; the security identifier is parsed based on the time information, the production information and the information digest are extracted, and compared with preset original information to determine the legality of the security identifier. This allows device manufacturers such as mobile phone manufacturers to verify the authenticity of the security identifier, thereby improving the information aggregation and security of device identifiers and bringing a better system experience for device data analysis and compliance.

[0048] Example 9 Based on the above embodiments, the present invention also proposes a security identifier generation and application device, the device including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program, when executed by the processor, implements the steps of the security identifier generation and application method as described in any of the above embodiments.

[0049] It should be noted that the above-described device embodiments and method embodiments belong to the same concept. The specific implementation process can be found in the method embodiments, and the technical features in the method embodiments are also applicable to the device embodiments, which will not be repeated here.

[0050] Example 10 Based on the above embodiments, the present invention also proposes a computer-readable storage medium storing a security identifier generation and application program, wherein the security identifier generation and application program, when executed by a processor, implement the steps of the security identifier generation and application method as described in any of the above claims.

[0051] It should be noted that the above-described medium embodiments and method embodiments belong to the same concept. The specific implementation process can be found in the method embodiments, and the technical features in the method embodiments are also applicable to the medium embodiments, which will not be repeated here.

[0052] The present invention provides a method, device, and computer-readable storage medium for generating and applying security identifiers. This involves combining two randomly generated universally unique identifiers into a base identifier; acquiring the device's production information and device signature; generating a message digest based on the device's International Mobile Equipment Identity (IMEI), current time, and the production information; identifying the writing and / or reading of the production information, device signature, and message digest using the first character of the base identifier; and generating the device's security identifier by replacing the last character of the base identifier with alternating characters based on the production information and message digest. This achieves a more efficient solution for generating and applying security identifiers, improving the security, aggregation, and anti-counterfeiting capabilities of device security identifiers while meeting compliance requirements, and enhancing the effectiveness of security identifier verification.

[0053] It should be noted that, in this document, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element.

[0054] The sequence numbers of the above embodiments of the present invention are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.

[0055] Through the above description of the embodiments, those skilled in the art can clearly understand that the methods of the above embodiments can be implemented by means of software plus necessary general-purpose hardware platforms. Of course, they can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk) and includes several instructions to cause a terminal (which may be a mobile phone, computer, server, air conditioner, or network device, etc.) to execute the methods described in the various embodiments of the present invention.

[0056] The embodiments of the present invention have been described above with reference to the accompanying drawings. However, the present invention is not limited to the specific embodiments described above. The specific embodiments described above are merely illustrative and not restrictive. Those skilled in the art can make many other forms under the guidance of the present invention without departing from the spirit and scope of the claims. All of these forms are within the protection scope of the present invention.

Claims

1. A method for generating and applying a security identifier, characterized in that, The method includes: Combine two randomly generated universally unique identifiers into a baseline identifier; Obtain the equipment's production information and equipment signature, and generate a message digest based on the equipment's International Mobile Equipment Identity (IMEI), current time, and the production information; The writing and / or reading of the production information, the equipment signature, and the information digest are identified by the first character of the reference identifier; The safety identifier of the device is generated by replacing the last character of the baseline identifier with a spaced-out replacement based on the production information and the information digest.

2. The method for generating and applying security identifiers according to claim 1, characterized in that, The step of generating an information digest based on the device's International Mobile Equipment Identity (IMEI), current time, and production information specifically includes: The International Mobile Equipment Identity (IMEI), the current time, and the production information are calculated using a preset secure hash algorithm. According to the preset summary extraction starting position, one character is extracted every eight characters in the calculation result, for a total of eight characters, as the information summary.

3. The method for generating and applying security identifiers according to claim 1, characterized in that, The step of identifying the writing and / or reading of the production information, the device signature, and the information digest using the first character of the reference identifier specifically includes: Determine the first starting position of the production information in the safety label; The last three bits of the first character of the reference identifier are combined with the first three bits of the second character to form a numerical value, which is used to identify the first starting position.

4. The method for generating and applying security identifiers according to claim 1, characterized in that, The step of identifying the writing and / or reading of the production information, the device signature, and the information digest using the first character of the reference identifier specifically includes: Determine the first reading order of the production information in the security identifier; The first reading order is identified by the last bit of the third character of the reference identifier.

5. The method for generating and applying security identifiers according to claim 1, characterized in that, The step of identifying the writing and / or reading of the production information, the device signature, and the information digest using the first character of the reference identifier specifically includes: Determine the second reading order of the device signature in the security identifier; The second reading order is identified by the penultimate bit of the third character of the reference identifier.

6. The method for generating and applying security identifiers according to claim 1, characterized in that, The step of identifying the writing and / or reading of the production information, the device signature, and the information digest using the first character of the reference identifier specifically includes: Determine the second starting position of the message digest in the security identifier; The last three bits of the fourth character of the reference identifier are used to identify the second starting position.

7. The method for generating and applying security identifiers according to claim 1, characterized in that, The step of replacing the last characters of the baseline identifier with alternating positions based on the production information and the information digest to generate the security identifier of the device specifically includes: The production information is placed before the information digest, and the latter part of the base identifier is replaced with alternating characters by combining the production information and the information digest. During the replacement process, if the character to be replaced is zero, no replacement is performed, and the first, second, third, and fourth characters of the reference identifier are skipped.

8. The method for generating and applying security identifiers according to claim 1, characterized in that, The generation of the security identifier for the device then includes: During the verification phase of the security identifier, the time information of when the device reported the security identifier is obtained; The security identifier is parsed based on the time information, the production information and the information digest are extracted, and compared with the preset original information to determine the legality of the security identifier.

9. A device for generating and applying security identifiers, characterized in that, The device includes a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program, when executed by the processor, implements the steps of the method for generating and applying a security identifier as described in any one of claims 1 to 8.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a security identifier generation and application program, which, when executed by a processor, implements the steps of the security identifier generation and application method as described in any one of claims 1 to 8.

Images