An authentication method and authentication system for simultaneous interconnection of a plurality of peripherals

Abstract

The application provides an authentication method and authentication system for simultaneous interconnection of multiple peripherals, the authentication method comprising: setting a background server as a unique trusted source of the peripherals, and registering the peripherals with the background server for identity; sending a function connection instruction by a peripheral requiring association through the background server; in response to the function connection instruction, the background server generates verification information and simultaneously sends the verification information to all the peripherals participating in the interconnection; controlling any peripheral among all the peripherals to send the verification information to other peripherals as a verification initiator; verifying the verification initiator by a verification receiver according to the verification information; and establishing interconnection between the verification initiator and the verification receiver if the verification is passed; the technical problem solved by the application is that in the related art, when multiple devices are authenticated, each device needs to store and verify the certificates of all other participating devices, which results in a complex network trust relationship and easily causes an overload of the background server.

Description

Technical Field

[0001] This invention relates to the field of secure communication technology for networked devices, and more specifically, to an authentication method and system for simultaneous interconnection of multiple peripheral devices. Background Technology

[0002] In IoT device interconnection scenarios, multi-device collaboration has become a common requirement. Traditional authentication schemes require each participating device to pre-store and verify the digital certificates of all other devices. This point-to-point trust mechanism leads to the need to establish a complex cross-verification network between devices.

[0003] As the number of interconnected devices increases, not only does the storage burden on each device increase significantly, but the computational load of the certificate verification process also grows exponentially. Especially in dynamic networking scenarios, the addition or removal of new devices requires rebuilding the entire trust network, resulting in persistently high system maintenance costs.

[0004] However, the relevant technologies have at least one of the following problems: when multiple devices perform authentication, each device needs to store and verify the certificates of all other participating devices, which will result in complex network trust relationships and may easily lead to overload of the backend server. Summary of the Invention

[0005] The technical problem solved by this invention is that in related technologies, when multiple devices perform authentication, each device needs to store and verify the certificates of all other participating devices, which leads to complex network trust relationships and can easily cause the backend server to overload.

[0006] To address the aforementioned issues, this invention provides an authentication method for simultaneous interconnection of multiple peripheral devices, comprising: setting a backend server as the sole source of trust for the peripheral devices and controlling the peripheral devices to register their identities through the backend server; controlling the peripheral devices requiring the connection to send a function connection command through the backend server; responding to the function connection command, controlling the backend server to generate verification information and simultaneously sending the verification information to all peripheral devices participating in the interconnection; controlling any one of the peripheral devices to send verification information to the other peripheral devices as the verification initiator; wherein the other peripheral devices are the verification receivers; controlling the verification receivers to verify the verification initiator based on the verification information; if the verification is successful, an interconnection connection is established between the verification initiator and the verification receiver; wherein all peripheral devices complete authentication through at least pairwise mutual verification of verification information, and any peripheral device can act as both a verification initiator and a verification receiver.

[0007] Compared with existing technologies, the technical effects achieved by this solution are as follows: Compared with related technologies where multi-device authentication requires mutual storage and verification of each other's certificates, leading to complex trust relationships, this invention replaces the mode of multiple devices storing certificates by setting the backend server as the sole source of trust. Devices do not need to store certificates of other interconnected devices, but only need to trust the verification information issued by the backend server, eliminating complex trust relationships between multiple devices and reducing device storage pressure and trust relationship maintenance costs. Furthermore, the mechanism of synchronously issuing the same verification information to all participating peripherals reduces frequent interactions between devices and the server. Authentication is completed by mutually verifying verification information in pairs, eliminating the need for the backend server to participate in the verification process one by one, significantly reducing the processing load of the backend server. Finally, the design that any peripheral can act as both a verification initiator and a receiver allows devices to freely form a network according to functional requirements.

[0008] In one embodiment of the present invention, controlling the peripheral device to register its identity through a backend server includes: the peripheral device sending a registration request to the backend server, the registration request including the peripheral device's hardware information and user authentication information; controlling the backend server to verify the legality of the user authentication information; and, after confirming that the user authentication information is legal, binding and storing the hardware information with the user authentication information, and marking the peripheral device as a trusted peripheral device that can participate in the interconnection.

[0009] Compared with existing technologies, the technical effects achieved by this solution are as follows: Through dual registration information combining hardware information and user identity authentication information, precise binding of device identity is achieved; hardware information ensures the uniqueness of the device's physical identity, while user identity information ensures authorized use of the device, eliminating the possibility of unauthorized devices accessing the network from the source; furthermore, the design of marking trusted peripherals as eligible for interconnection provides a basis for subsequent authentication; the backend server only needs to process connection requests from trusted peripherals, reducing resource consumption on invalid devices and improving the overall system's operating efficiency.

[0010] In one embodiment of the present invention, after confirming the legitimacy of the user's identity authentication information and binding and storing the hardware information with the user's identity authentication information, the authentication method further includes: controlling the backend server to classify the registered peripherals according to preset rules to form device categories; assigning dedicated logical channel identifiers to peripherals belonging to the same device category, the logical channel identifiers being used by the backend server to identify and manage devices of that category; and simultaneously sending verification information to all peripherals participating in the interconnection, including: controlling the backend server to determine the target peripherals for which verification information needs to be sent according to the logical channel identifiers.

[0011] Compared with existing technologies, the technical effects achieved by adopting this technical solution are as follows: By classifying and assigning dedicated logical channel identifiers according to preset rules, the backend can quickly identify device attributes, making it easier to formulate differentiated management strategies for different categories of devices; By identifying target peripherals through logical channel identifiers, the backend can directly send verification information in batches to interconnected devices in specific categories, avoiding invalid pushes to irrelevant devices, reducing network redundancy transmission, and lowering server processing costs.

[0012] In one embodiment of the present invention, controlling the associated peripheral device to send a function connection instruction through a backend server includes: controlling the trusted peripheral device to send a function connection instruction to the backend server; responding to the function connection instruction, controlling the backend server to generate verification information includes: when the backend server receives the function connection instruction, the backend server dynamically generates verification information; and presets a timeout for the verification information.

[0013] Compared with existing technologies, the technical effects achieved by this solution are as follows: The restriction that only trusted peripherals can send function connection commands avoids invalid requests initiated by untrusted devices from consuming server resources, ensuring that server computing power is concentrated on processing legitimate functions; the design of dynamically generated verification information combined with a preset timeout ensures that the verification information is timely and new information is generated each time a function connection is established, avoiding the risk of fixed verification information being abused over a long period; the timeout mechanism further ensures that even if information is leaked, it will become invalid within a short time, significantly improving the security of authentication.

[0014] In one embodiment of the present invention, the same verification information is sent simultaneously to all peripherals participating in the interconnection, including: controlling the backend server to parse the logical channel identifier carried in the connection instruction; matching the pre-assigned device category and associated peripheral list according to the logical channel identifier; and synchronously sending the verification information and timeout to all trusted peripherals in the peripheral list.

[0015] Compared with existing technologies, the technical effects achieved by adopting this solution are as follows: By parsing the logical channel identifier in the functional connection command to match the device category and peripheral list, the backend server can identify the devices that need to participate in the current interconnection function, preventing the verification information from being mistakenly sent to other unrelated devices and ensuring the accuracy of authentication; furthermore, it can ensure that the devices participating in the interconnection obtain the same verification basis at the same time; it avoids verification failures caused by information reception delays or inconsistent content, and improves the success rate of multi-device mutual authentication.

[0016] In one embodiment of the present invention, the control verification receiver verifies the verification initiator based on the verification information, including: controlling the verification initiator to send the verification information and its own hardware information to the verification sender; controlling the verification receiver to check whether the verification information sent by the verification initiator is consistent with the verification information received by itself from the backend server; controlling the verification receiver to check whether the verification information is within the timeout period; controlling the verification receiver to check whether the verification initiator is a trusted peripheral; when all three verifications are passed, the verification initiator is confirmed to have passed the verification.

[0017] Compared with existing technologies, the technical effects achieved by this solution are as follows: Verification information consistency ensures that the initiator and receiver use the same credentials issued by the backend, preventing forged verification information; timeout checks ensure that verification information is valid, preventing unauthorized connections using expired information; querying whether the initiator is a trusted peripheral ensures that participating devices are registered and authorized, preventing unregistered devices from joining; the triple verification forms a security closed loop from the three dimensions of credential validity, timeliness, and identity legitimacy, significantly reducing the risk of malicious devices deceiving authentication; and the receiver only needs to complete verification using locally stored information, eliminating the need for frequent interaction with the backend, reducing network latency, and improving the speed of inter-device verification.

[0018] In one embodiment of the present invention, after the authentication information and timeout are synchronously sent to all trusted peripherals in the peripheral list, the authentication method further includes: controlling the backend server to synchronously distribute all device identifiers associated with the logical channel identifier; and the authentication recipient storing the device identifiers as a local trusted list.

[0019] Compared with existing technologies, the technical effects achieved by adopting this technical solution are as follows: The design of synchronously sending all device identifiers associated with the logical channel identifier to the local trusted list in the background allows the device to directly query the local list to confirm whether the other party is a trusted peripheral when verifying the identity of the initiator, without having to send a query request to the background every time; Due to the existence of the local trusted list, the device can still complete basic identity verification based on the locally stored identifiers when there are brief network fluctuations or when the connection with the background is interrupted, thus improving the stability and fault tolerance of the system.

[0020] In one embodiment of the present invention, the verification receiver and the verification initiator are connected by a wired connection, and / or the verification receiver and the verification initiator are connected by a wireless connection.

[0021] In one embodiment of the present invention, an authentication system for simultaneous interconnection of multiple peripherals is also provided, capable of applying the authentication methods described in any of the above embodiments. The authentication system includes: a control module, which is used to set a backend server as the sole source of trust for the peripherals, and control the peripherals requiring the connection to send function connection instructions through the backend server; control the backend server to generate verification information and simultaneously send the verification information to all peripherals participating in the interconnection; control any one of the peripherals to send verification information to the other peripherals as the verification initiator; wherein the other peripherals are the verification recipients; a registration module, which is used to control the peripherals to register their identities through the backend server; and a verification module, which is used to control the verification recipients to verify the verification initiator based on the verification information.

[0022] By adopting the technical solution of the present invention, the following technical effects can be achieved:

[0023] (1) This invention replaces the multi-device certificate storage mode by setting the backend server as the sole source of trust; the device does not need to store the certificates of other interconnected devices, but only needs to trust the verification information issued by the backend server, thus eliminating the complex trust relationship between multiple devices and reducing the storage pressure and trust relationship maintenance cost of the devices; and adopts the mechanism of synchronously issuing the same verification information to all participating peripherals, which reduces the frequent interaction between the device and the server; authentication is completed by mutual verification of verification information, without the need for the backend server to participate in the verification process one by one, which greatly reduces the processing load of the backend server; finally, the design that any peripheral can act as both the verification initiator and the receiver allows the devices to freely form a network according to functional requirements;

[0024] (2) The present invention classifies and assigns dedicated logical channel identifiers according to preset rules, enabling the backend to quickly identify device attributes and facilitate the formulation of differentiated management strategies for different categories of devices; by identifying the target peripheral through the logical channel identifier, the backend can directly send verification information to the interconnected devices in a specific category in batches, avoiding invalid push to irrelevant devices, reducing network redundant transmission, and reducing server processing costs.

[0025] (3) By parsing the logical channel identifier in the function connection instruction to match the device category and peripheral list, the background server can lock the device that needs to participate in the current interconnection function, which prevents the verification information from being mistakenly sent to other unrelated devices and ensures the accuracy of authentication. In addition, it can ensure that the devices participating in the interconnection obtain the same verification basis at the same time, avoid verification failure caused by information reception delay or content inconsistency, and improve the success rate of multi-device mutual verification. Attached Figure Description

[0026] To more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings to be used in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0027] Figure 1 This is a schematic diagram of an authentication method for simultaneous interconnection of multiple peripherals provided in an embodiment of the present invention;

[0028] Figure 2 This is a schematic diagram of a module of an authentication system for simultaneous interconnection of multiple peripherals provided by the present invention.

[0029] Explanation of reference numerals in the attached figures:

[0030] 100. Authentication system; 10. Control module; 20. Registration module; 30. Verification module. Detailed Implementation

[0031] In existing technologies, multi-device interconnection authentication typically employs a cross-verification model, where each participating device needs to pre-store the digital certificates or key information of other devices. As the number of devices increases, the complexity of certificate management grows exponentially, requiring the establishment of many-to-many trust relationships between devices. For example, in a smart home scenario, when ten devices need to network, each device needs to store nine certificates, and the system as a whole needs to maintain forty-five trust relationships. This model results in a significant consumption of device storage resources, and the certificates of all associated devices must be reconfigured each time a new device is added. Furthermore, all verification requests must be processed through a server, and when devices frequently initiate connection requests, the server is prone to response delays or even crashes.

[0032] To make the above-mentioned objects, features and advantages of the present invention more apparent and understandable, specific embodiments of the present invention will be described in detail below with reference to the accompanying drawings.

[0033] See Figure 1 , Figure 1 This is a schematic diagram of an authentication method for simultaneous interconnection of multiple peripheral devices provided in an embodiment of the present invention; the present invention provides an authentication method for simultaneous interconnection of multiple peripheral devices, including:

[0034] S1: Set the backend server as the sole source of trust for peripheral devices and control the peripheral devices to register their identities through the backend server;

[0035] S2: Controls peripheral devices that require related functions to send function connection commands through the backend server;

[0036] S3: In response to the function connection command, control the backend server to generate verification information and send the verification information to all peripherals involved in the interconnection at the same time;

[0037] S4: Control any one of the peripherals to send verification information to the other peripherals in the entire network as the verification initiator; wherein, the other peripherals are the verification receivers;

[0038] S5: Control the verification receiver to verify the verification initiator based on the verification information;

[0039] S51: If the verification passes, an interconnection is established between the verification initiator and the verification receiver;

[0040] S52: If the verification fails, the verification receiver refuses to establish an interconnection connection with the verification initiator.

[0041] All peripherals complete authentication through at least pairwise mutual verification information, and any peripheral can act as both the verification initiator and the verification receiver.

[0042] Preferably, the authentication method provided by the present invention can be applied to the automotive field.

[0043] In this context, the backend server serving as the sole source of trust means that all peripheral devices establish a one-way trust relationship with the server, which can be achieved through a digital certificate issuance mechanism.

[0044] In practical use, car dashcams are connected to Ethernet. To view dashcam content on a mobile phone, the phone needs to connect to the dashcam and mobile app via the car's infotainment system, routing them to the same network segment. This process requires authentication by the external mobile app. Currently, the simplest and most efficient authentication process is for the mobile app to first register with its real name. After registration, if the user wants to view the dashcam content via the mobile app, the app needs to send a request to the backend server. The backend server will verify the validity of the request. If valid, the backend server will send verification information to both the mobile app and the car's infotainment system. Once the car's infotainment system successfully pairs with the dashcam, it routes the mobile app and dashcam to the same network segment, allowing them to interconnect via the car's network.

[0045] Furthermore, the peripheral devices are controlled to register their identities through the backend server, including:

[0046] The peripheral device sends a registration request to the backend server. The registration request includes the peripheral device's hardware information and the user's identity authentication information.

[0047] Control the backend server to verify the legitimacy of user identity authentication information;

[0048] Once the user's authentication information is confirmed to be legitimate, the hardware information is bound and stored together with the user's authentication information, and the peripheral device is marked as a trusted peripheral device that can participate in the interconnection.

[0049] Preferably, hardware information refers to the physical identification data of the peripheral device, which can be implemented using a MAC address, device serial number, or chip code, to uniquely identify the device entity; user identity authentication information refers to the user's identity verification credentials, which can be implemented using a combination of account and password, biometric data, or digital certificate, to confirm the legitimate identity of the device operator; binding storage refers to establishing a relationship between hardware information and user identity, which can be implemented using a database association table or blockchain notarization method to form an immutable identity binding record; trusted peripheral device refers to the device entity that has passed identity verification, used to ensure that the device initiating the connection request has a legitimate identity as the trust basis for subsequent authentication operations.

[0050] Specifically, when a peripheral device with association requirements connects to the backend server for the first time, it needs to actively submit a registration request containing its physical identifier and user credentials. The backend server verifies the compliance of the information submitted by the peripheral device. After successful verification, the backend server permanently associates and stores the physical characteristics of the peripheral device with the user account; the bound device is granted a trust identifier, such as adding a "verified" status mark to the device properties; thus, a server-centric trust system is established, eliminating the need for complex cross-certificate libraries between devices and relying solely on the server's unified authentication results.

[0051] Furthermore, after confirming the legitimacy of the user's authentication information and binding and storing the hardware information with the user's authentication information, the authentication method also includes:

[0052] The control backend server categorizes registered peripherals according to preset rules, forming device categories;

[0053] Dedicated logical channel identifiers are assigned to peripherals belonging to the same device category. These logical channel identifiers are used by the backend server to identify and manage devices of that category.

[0054] The verification information is sent simultaneously to all peripherals participating in the interconnection, including:

[0055] The control backend server determines the target peripheral device that needs to receive verification information based on the logical channel identifier.

[0056] Among them, the preset rules refer to the pre-defined device classification standards, which can be based on device function type, communication protocol version, or user permission level, and the device groups are divided through standardized classification; the device category refers to the set of peripherals with the same attribute characteristics, which can be classified by device model, usage scenario, or security level to form manageable device groups; the logical channel identifier refers to the communication path mark used to distinguish different device categories, which can be generated in the form of numerical code or string, and establish the correspondence between device category and communication channel; the target peripheral refers to the specific group of devices that need to receive verification information, which can be filtered out by matching the logical channel identifier to select the set of devices belonging to the same category.

[0057] Specifically, after peripheral device registration is completed, the backend server further categorizes the peripheral devices based on their functional types; each peripheral category is assigned a unique logical channel identifier. When verification information needs to be sent, the backend server sends the verification information only to the corresponding device group based on the identifier carried in the functional connection command.

[0058] Furthermore, the peripheral devices requiring control send function connection commands through the backend server, including:

[0059] Control trusted peripherals to send function connection commands to the backend server;

[0060] In response to the function connection command, control the backend server to generate verification information, including:

[0061] Once the backend server receives the function connection command, the backend server dynamically generates verification information.

[0062] Set a timeout period for the verification information.

[0063] Preferably, the verification information is a verification code.

[0064] Dynamically generated verification information refers to the unique verification code generated by the backend server each time it receives a function connection command.

[0065] Preferably, the verification code for the verification information is generated randomly each time.

[0066] The preset timeout period refers to the validity period set for verification information, which is used to enforce the authentication operation between devices within a time window.

[0067] Specifically, when a trusted peripheral needs to establish a connection with other devices, it is only allowed to send a connection command to the backend server. Untrusted devices cannot initiate such requests, thus preventing unauthorized access at the source. Upon receiving the command, the backend server immediately generates verification information containing a random combination of characters, such as an 8-character alphanumeric string, and sets a validity period for this information, such as 5 minutes. The verification information and timeout are simultaneously sent to all trusted peripherals participating in the interconnection, and each device must complete the mutual verification operation within the specified time. If a device fails to complete verification before the timeout, the backend server will automatically discard the verification information, avoiding resource waste due to network latency or malicious occupation.

[0068] Furthermore, the same authentication information is simultaneously sent to all peripherals participating in the interconnection, including:

[0069] The logical channel identifier carried in the connection command of the control backend server parsing function;

[0070] Based on the logical channel identifier, match the pre-assigned device category and the associated peripheral list;

[0071] The verification information and timeout time are sent synchronously to all trusted peripherals in the peripheral list.

[0072] Among them, the logical channel identifier is the same type of device channel assigned by the backend server to the registered device, which is used to request peripheral interconnection; for example, the device channel is classified by a specific URL path such as: server address: / server / inter-working-device / deviceA, deviceB, etc.

[0073] Furthermore, each logical channel identifier corresponds to a set of physical addresses or digital certificate digests of registered devices. This feature, by establishing a mapping relationship between logical groups and device identifiers, enables devices to obtain associated device information on demand.

[0074] The peripheral list refers to the set of registered devices associated with a specific logical channel identifier. Specifically, the mapping relationship between device identifiers and logical channels can be stored in a database, and the target device set can be quickly obtained through query operations.

[0075] Specifically, when the backend server receives a function connection instruction, it first extracts the logical channel identifier embedded in the instruction, which corresponds to a specific device communication logic group; by querying the pre-stored device classification data, it quickly matches the device category corresponding to the logical channel and its associated peripheral list; then, it synchronously sends the dynamically generated verification information and its preset validity period parameters to all trusted peripherals in the list that have passed identity registration.

[0076] Furthermore, the verification recipient verifies the verification initiator based on the verification information, including:

[0077] Controls the direction of verification initiation, verifying the verification information sent by the sender and its own hardware information;

[0078] The control verification receiver checks whether the verification information sent by the verification initiator is consistent with the verification information it receives from the backend server;

[0079] Control whether the verification receiver queries the verification information within the timeout period;

[0080] The control verification receiver queries whether the verification initiator is a trusted peripheral device;

[0081] When all three verifications above pass, the verification initiator is confirmed to have passed the verification.

[0082] Depending on the specific circumstances, when the initiator sends a verification request carrying a dynamic verification code and hardware information, the receiving party first compares the received verification code with the information sent by the server and stored locally to rule out the risk of forgery or tampering. Next, the receiving party checks if the current time is within the server's preset valid time window; for example, if the verification information is valid for 60 seconds and automatically expires after that. Finally, the receiving party queries the trusted device list sent by the backend to confirm whether the initiator's device fingerprint exists in the list. These three verification steps form a progressive security barrier. For example, if a device attempts to use an expired verification code, even if the information matches, the connection will be refused due to timeout verification failure. Simultaneously, even if an unregistered device obtains a valid verification code, it will be blocked because its device fingerprint is not registered.

[0083] Furthermore, after synchronously sending the verification information and timeout to all trusted peripherals in the peripheral device list, the authentication method also includes:

[0084] The control backend server synchronously distributes all device identifiers associated with the logical channel identifier;

[0085] The verification receiver stores the device identifier as a local trusted list.

[0086] The local trusted list refers to the set of authorized device identifiers temporarily stored in the memory of the receiving device.

[0087] Specifically, after the backend server completes the distribution of verification information, it further packages and sends the identification information of all authorized devices under the current logical channel. During the verification phase, the receiving device first queries its locally cached trusted list. If the device identification of the verification initiator exists in the list, it directly proceeds to the subsequent verification process. This mechanism eliminates the need for devices to pre-store certificates of all possible interacting devices, instead performing dynamic verification based on the list sent by the server in real time, effectively reducing the storage burden on the device.

[0088] Furthermore, the verification receiver and the verification initiator are connected via a wired connection, and / or, the verification receiver and the verification initiator are connected via a wireless connection.

[0089] Wired connection refers to a communication method that transmits verification information based on physical cables, which can be implemented using USB interface, Ethernet interface or serial communication interface; wireless connection refers to a communication method that transmits verification information based on electromagnetic waves, which can be implemented using Wi-Fi protocol or Bluetooth protocol.

[0090] Specifically, when peripherals are in a fixed deployment scenario, a physical communication channel is established through a wired connection. The shielding properties of the physical cable are used to resist external signal interference, ensuring the integrity of the verification information transmission. When peripherals are in a mobile deployment scenario, a logical communication channel is established through a wireless connection. The broadcast characteristics of the wireless protocol are used to achieve rapid network formation, meeting the temporary access needs of devices. When peripherals have both wired and wireless interfaces, dual-channel redundant verification can be achieved through dynamic selection or parallel transmission mechanisms. A connection can be established as long as either channel completes authentication, thus ensuring a high authentication success rate in complex environments.

[0091] For further information, please refer to [link / reference]. Figure 2 The present invention also provides an authentication system 100 for simultaneous interconnection of multiple peripherals, capable of applying the authentication methods in any of the above examples. The authentication system 100 includes: a control module 10, a registration module 20, and a verification module 30. The control module 10 is used to set a backend server as the sole source of trust for the peripherals, and to control the peripherals with associated requirements to send function connection instructions through the backend server; to control the backend server to generate verification information and send the verification information to all peripherals participating in the interconnection simultaneously; and to control any one of the peripherals to send verification information to the other peripherals as the verification initiator; wherein the other peripherals are the verification recipients. The registration module 20 is used to control the peripherals to register their identities through the backend server. The verification module 30 is used to control the verification recipients to verify the verification initiator based on the verification information.

[0092] While the present invention has been disclosed above, it is not limited thereto. Any person skilled in the art can make various modifications and alterations without departing from the spirit and scope of the invention; therefore, the scope of protection of the present invention should be determined by the scope defined in the claims.

Claims

1. An authentication method for simultaneous interconnection of multiple peripheral devices, characterized in that, include: The backend server is set as the sole source of trust for the peripheral devices, and the peripheral devices are controlled to register their identities through the backend server. The control-related peripheral devices send function connection instructions through the backend server; In response to the function connection command, the backend server is controlled to generate verification information and simultaneously send the verification information to all peripherals participating in the interconnection; Control any one of the peripherals to send verification information to the other peripherals as the verification initiator; wherein the other peripherals are the verification receivers; The verification receiver is controlled to verify the verification initiator based on the verification information; If the verification passes, an interconnection is established between the verification initiator and the verification receiver. In this process, all peripherals complete authentication by mutually verifying the verification information in at least two pairs, and any peripheral can act as both the verification initiator and the verification receiver.

2. The authentication method according to claim 1, characterized in that, The process of controlling the peripheral device to register its identity through the backend server includes: The peripheral device sends a registration request to the backend server. The registration request includes the peripheral device's hardware information and user authentication information. The backend server is controlled to verify the legality of the user's identity authentication information; Once the user authentication information is confirmed to be legitimate, the hardware information is bound and stored together with the user authentication information, and the peripheral device is marked as a trusted peripheral device that can participate in the interconnection.

3. The authentication method according to claim 2, characterized in that, After confirming the legitimacy of the user authentication information and binding and storing the hardware information with the user authentication information, the authentication method further includes: The backend server is controlled to classify the registered peripherals according to preset rules to form device categories; A dedicated logical channel identifier is assigned to the peripherals belonging to the same device category. The logical channel identifier is used by the backend server to identify and manage devices of that category. The step of simultaneously sending the verification information to all peripherals participating in the interconnection includes: The backend server determines the target peripheral device that needs to receive the verification information based on the logical channel identifier.

4. The authentication method according to claim 3, characterized in that, The peripheral device that controls the associated requirements sends a function connection command through the backend server, including: Control the trusted peripheral device to send the function connection command to the backend server; The step of controlling the backend server to generate verification information in response to the function connection command includes: When the backend server receives the function connection instruction, the backend server dynamically generates the verification information; A timeout period is preset for the verification information.

5. The authentication method according to claim 4, characterized in that, The step of simultaneously sending the verification information to all peripherals participating in the interconnection includes: The backend server is controlled to parse the logical channel identifier carried in the function connection instruction; Based on the logical channel identifier, match the pre-assigned device category and associated peripheral list; The verification information and the timeout period are simultaneously sent to all trusted peripherals in the peripheral list.

6. The authentication method according to claim 4 or 5, characterized in that, The control of the verification receiver to verify the verification initiator based on the verification information includes: The verification initiator sends the verification information and its own hardware information to the verification sender; The verification receiver controls whether the verification information sent by the verification initiator is consistent with the verification information it receives from the backend server; The verification receiver is controlled to query whether the verification information is within the timeout period; The verification receiver is controlled to query whether the verification initiator belongs to the trusted peripheral device; When all three verifications above pass, the verification initiator is confirmed to have passed the verification.

7. The authentication method according to claim 6, characterized in that, After synchronously sending the verification information and the timeout to all trusted peripherals in the peripheral device list, the authentication method further includes: The backend server is controlled to synchronously distribute all device identifiers associated with the logical channel identifier; The verification receiver stores the device identifier in a local trusted list.

8. The authentication method according to any one of claims 1 to 5, characterized in that, The verification receiver and the verification initiator are connected via a wired connection, and / or The verification receiver and the verification initiator are connected wirelessly.

9. An authentication system for simultaneous interconnection of multiple peripheral devices, characterized in that, The authentication system is capable of applying the authentication method as described in any one of claims 1 to 8, and includes: The control module is used to set the backend server as the sole source of trust for peripherals, control the peripherals with associated requirements to send function connection instructions through the backend server; control the backend server to generate verification information and send the verification information to all peripherals participating in the interconnection; control any one of the peripherals to send verification information to the other peripherals as the verification initiator; wherein the other peripherals are the verification receivers. A registration module, which controls the peripheral device to register its identity through the backend server; A verification module is used to control the verification receiver to verify the verification initiator based on the verification information.

Images