Communication authentication method and device, authentication equipment and terminal equipment

Abstract

The invention relates to a communication authentication method and device, authentication equipment and terminal equipment. The method is applied to authentication equipment, the authentication equipment is provided with an ultrasonic receiver, and the method comprises the following steps: acquiring a data message received by access network equipment, and generating a first check code based on the data message; the data message is sent by the terminal equipment; acquiring a second check code based on the ultrasonic receiver; the second check code is generated by the terminal device based on the data message and sent by the ultrasonic transmitter; and judging whether the first check code is matched with the second check code, if so, determining that authentication succeeds, and controlling the access network equipment to communicate with the terminal equipment based on the data message. According to the method, ultrasonic waves are adopted to transmit security check codes, a controllable physical complete boundary is constructed by means of the rapid attenuation characteristic and the non-through-wall characteristic of the ultrasonic waves, and therefore space security isolation in the true sense is achieved; the communication authentication level can be improved, the reliability of communication authentication is improved, and the communication security is further improved.

Description

Technical Field

[0001] This application relates to the field of wireless communication technology, and in particular to a communication authentication method, apparatus, authentication device, and terminal device. Background Technology

[0002] With the development of wireless communication technology, communication authentication and information security are becoming increasingly important in various fields. Wireless access control in power systems, in particular, is crucial for the safe operation of the power system; therefore, strict communication authentication procedures must be implemented for power equipment accessing the system wirelessly.

[0003] Traditionally, wireless communication authentication mechanisms are mostly based on logical authentication, which cannot limit the physical access range of wireless terminals and are easily bypassed by high-power devices, directional antennas or relay devices, thus creating network security vulnerabilities in power facilities.

[0004] Therefore, improving the authentication level of wireless access for power equipment, thereby enhancing communication security, is a pressing technical problem that needs to be solved. Summary of the Invention

[0005] Therefore, it is necessary to provide a communication authentication method, device, computer equipment, computer-readable storage medium, and computer program product that can improve the authentication level of wireless access for power equipment and thus enhance communication security, in order to address the aforementioned technical problems.

[0006] Firstly, this application provides a communication authentication method applied to an authentication device, the authentication device being equipped with an ultrasonic receiver, including:

[0007] The system acquires data packets received by the access network device and generates a first checksum based on the data packets; the data packets are sent by the terminal device.

[0008] The second verification code is obtained based on the ultrasonic receiver; the second verification code is generated by the terminal device based on the data packet and transmitted through the ultrasonic transmitter.

[0009] Determine whether the first check code and the second check code match. If they do, the authentication is successful, and control the access network device to communicate with the terminal device based on data packets.

[0010] In one embodiment, obtaining the second verification code based on the ultrasonic receiver includes:

[0011] Ultrasonic signals are acquired using an ultrasonic receiver;

[0012] The ultrasonic signal is digitally converted to obtain the second check code.

[0013] In one embodiment, the method further includes:

[0014] If the first verification code and the second verification code do not match, the process returns to the step of obtaining the second verification code based on the ultrasonic receiver, until the preset number of verifications is reached.

[0015] In one embodiment, the second check code is generated based on redundant coding.

[0016] In one embodiment, the method further includes:

[0017] If the ultrasonic receiver fails to acquire an ultrasonic signal within a preset time period after acquiring the data packet, or if the second verification code is not recovered based on the ultrasonic signal, the authentication is deemed to have failed.

[0018] Secondly, this application provides a communication authentication method applied to a terminal device, the terminal device being equipped with an ultrasonic transmitter, including:

[0019] The system acquires the data packet to be sent, sends the data packet to the access point device, and instructs the access point device to transmit the data packet to the authentication device.

[0020] Generate a second verification code based on the data message;

[0021] The second verification code is sent to the authentication device via an ultrasonic transmitter. When the authentication device determines that the first verification code matches the second verification code, it controls the access point device to communicate with the terminal device based on the data packet. The first verification code is generated by the authentication device based on the received data packet.

[0022] Thirdly, this application also provides a communication authentication device for use in authentication equipment, wherein the authentication equipment is equipped with an ultrasonic receiver, including:

[0023] The generation module is used to acquire data packets received by the access network device and generate a first checksum based on the data packets; the data packets are sent by the terminal device.

[0024] The acquisition module is used to acquire the second verification code based on the ultrasonic receiver; the second verification code is generated by the terminal device based on the data packet and transmitted through the ultrasonic transmitter;

[0025] The authentication module is used to determine whether the first check code and the second check code match. If they do, the authentication is successful, and the access network device is controlled to communicate with the terminal device based on data packets.

[0026] Fourthly, this application also provides a communication authentication device applied to a terminal device, the terminal device being equipped with an ultrasonic transmitter, comprising:

[0027] The first sending module is used to acquire the data packet to be sent, send the data packet to the access point device, and instruct the access point device to transmit the data packet to the authentication device;

[0028] The generation module is used to generate a second checksum based on the data packet;

[0029] The second sending module is used to send the second verification code to the authentication device via an ultrasonic transmitter, so that the authentication device, when determining that the first verification code matches the second verification code, controls the access point device to communicate with the terminal device based on the data packet. The first verification code is generated by the authentication device based on the received data packet.

[0030] Fifthly, this application also provides an authentication device, including a memory and a processor. The memory stores a computer program, and the authentication device is equipped with an ultrasonic receiver. When the processor executes the computer program, it implements the steps of the communication authentication method in the first aspect described above.

[0031] In a sixth aspect, this application also provides a terminal device, including a memory and a processor, wherein the memory stores a computer program, the terminal device is equipped with an ultrasonic transmitter, and the processor executes the computer program to implement the steps of the communication authentication method in the second aspect above.

[0032] In a seventh aspect, this application also provides a computer-readable storage medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the steps of the communication authentication method in the first and second aspects described above.

[0033] Eighthly, this application also provides a computer program product, including a computer program that, when executed by a processor, implements the steps of the communication authentication method in the first and second aspects described above.

[0034] The aforementioned communication authentication method, apparatus, authentication device, terminal device, storage medium, and computer program product, wherein the method is applied to the authentication device, the authentication device being equipped with an ultrasonic receiver, includes: acquiring data packets received by the access network device and generating a first verification code based on the data packets; the data packets being sent by the terminal device; acquiring a second verification code based on the ultrasonic receiver; the second verification code being generated by the terminal device based on the data packets and sent through an ultrasonic transmitter; determining whether the first verification code and the second verification code match, and if so, determining that authentication is successful, and controlling the access network device to communicate with the terminal device based on the data packets. In other words, this embodiment uses ultrasonic waves to transmit security verification codes. By leveraging the rapid attenuation and non-penetrating properties of ultrasonic waves, a controllable physical boundary is constructed, thereby achieving true spatial security isolation. If the terminal device is located within the physical security boundary, it can collect ultrasonic signals and reconstruct the second verification code, thus completing the communication security verification and passing the authentication. For terminal devices outside the physical security boundary, ultrasonic signals cannot be received, and authentication fails. This prevents attackers from accessing the wireless network, thereby preventing information leakage, improving the communication authentication level, increasing the reliability of communication authentication, and ultimately improving communication security. Attached Figure Description

[0035] To more clearly illustrate the technical solutions in the embodiments or related technologies of this application, the accompanying drawings used in the description of the embodiments or related technologies will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0036] Figure 1 This is a diagram illustrating the application environment of a communication authentication method in one embodiment.

[0037] Figure 2 This is a flowchart illustrating a communication authentication method applied to an authentication device in one embodiment;

[0038] Figure 3 This is a flowchart illustrating a communication authentication method applied to a terminal device in one embodiment;

[0039] Figure 4 This is a schematic diagram of the authentication logic of a communication authentication system in one embodiment;

[0040] Figure 5 This is a structural block diagram of a communication authentication device applied to an authentication device in one embodiment;

[0041] Figure 6 This is a structural block diagram of a communication authentication device applied to a terminal device in one embodiment;

[0042] Figure 7 This is a diagram showing the internal structure of the authentication device in one embodiment;

[0043] Figure 8 This is an internal structure diagram of a terminal device in one embodiment. Detailed Implementation

[0044] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.

[0045] The communication authentication method provided in this application can be applied to, for example... Figure 1 In the application environment shown, terminal device 101 communicates with access network device 102 (such as a wireless access point, AP) via a network. To improve network communication security and avoid information leakage, this embodiment utilizes the rapid attenuation characteristics of ultrasonic waves to limit the physical range, setting a physical security boundary around access network device 102. In actual application scenarios, a communication authentication device 103 can be set up near access network device 102 (within a preset range). This authentication device 103 is equipped with an ultrasonic receiver, and the corresponding terminal device 101 is equipped with an ultrasonic transmitter.

[0046] In other words, when terminal device 101 needs to access the network, it can be moved within the physical security boundary of access network device 102 and send a second verification code to authentication device 103 using an ultrasonic transmitter. This utilizes the characteristics of ultrasonic waves—short propagation distance, easy attenuation, and inability to penetrate walls—to achieve secure transmission of the data packet verification code. Simultaneously, terminal device 101 sends data packets to access network device 102 via a wireless channel. Access network device 102 transmits the data packets to authentication device 103, which then generates a first verification code based on the data packets. If the first and second verification codes match, communication authentication is successful, allowing terminal device 101 to wirelessly communicate with access network device 102. Thus, terminal device 101 successfully accesses the wireless network.

[0047] It should be noted that when terminal device 101 is connected to a wireless network, terminal device 101 can continue to work within the physical security range of access network device 102, or it can work outside the physical security range. For example, terminal device 101 can be moved to other spatial locations and operate normally, and report data through the accessed wireless network.

[0048] For example, the above application scenarios are applicable to network security protection scenarios requiring strict physical isolation, such as power switching stations, substations, and industrial computer rooms. Since wireless signals can penetrate walls, attackers may establish connections outside the facility's perimeter, posing risks of information leakage and remote control. However, by employing the communication authentication scheme proposed in this application, a controllable physical security boundary can be constructed using ultrasound.

[0049] It should also be noted that the ultrasonic transmitter can be integrated into the terminal device 101 or can be independent of the terminal device 101. The authentication device 103 can be integrated into the access network device 102 or can be independent of the access network device 102. That is, the authentication device 103 can be compatible with the existing wireless system, i.e., the access network device 102. This not only improves the communication authentication level and communication security, but also has high compatibility, is simple to deploy, and is easy to apply.

[0050] In one exemplary embodiment, such as Figure 2 As shown, a communication authentication method is provided, which is applied to... Figure 1 Taking the authentication device in the example, the explanation includes the following steps 201 to 203. Wherein:

[0051] Step 201: Obtain the data packet received by the access network device and generate the first checksum based on the data packet.

[0052] The data packets are sent by the terminal device.

[0053] For example, when a terminal device communicates with an access network device, the terminal device can send data packets to the access network device. In conventional technology, the access network device authenticates the data packets, and after successful authentication, it uploads the data packets. However, in this application, an authentication device performs auxiliary authentication on the data packets. Therefore, after receiving the data packets sent by the terminal device, the access network device can transmit the data packets to the authentication terminal.

[0054] When the authentication terminal receives a data packet, it can use a preset verification model to convert the data packet into a first verification code. For example, the preset verification model can be any type of hash function, which calculates the hash digest value (or hash value) corresponding to the data packet. A hash function is a method that transforms an input of arbitrary length into a fixed-length output using a hash algorithm. The first verification code can be a 128-bit hash value, a 256-bit hash value, etc., and the hash function can be Secure Hash Algorithm 1 (SHA-1), Message Digest Algorithm 5 (MD5), SHA-256, SHA-3, etc.

[0055] It should be noted that the data packet may include information such as the terminal device's identity document (ID), request type, request parameters, communication protocol, verification algorithm, sample value, and timestamp. This application embodiment does not specifically limit this.

[0056] Step 202: Obtain the second verification code based on the ultrasonic receiver.

[0057] The second verification code is generated by the terminal device based on the data packet and transmitted through an ultrasonic transmitter.

[0058] For example, the terminal device sends data packets to the access network device via a wireless channel. On the other hand, it performs a hash calculation on the data packets to obtain a second check code, and sends the second check code to the authentication device in the form of ultrasonic waves via an ultrasonic transmitter. The ultrasonic receiver in the authentication device can receive the ultrasonic signal and, by digitally converting the ultrasonic signal, can recover the second check code.

[0059] The ultrasonic transmitter can use pulse modulation to encode the second check code and generate an ultrasonic signal carrying the second check code information; the ultrasonic receiver collects the ultrasonic signal, and the authentication device first performs analog-to-digital conversion on the ultrasonic signal, that is, converts the analog ultrasonic signal into a digital ultrasonic signal, and then converts the digital ultrasonic signal to extract the second check code.

[0060] Step 203: Determine whether the first verification code and the second verification code match. If they do, the authentication is successful, and the access network device is controlled to communicate with the terminal device based on data packets.

[0061] When the authentication device generates a first checksum based on the digital message and reconstructs a second checksum, it can compare and match the first checksum and the second checksum. If the first checksum and the second checksum match, it can be determined that the terminal device is within the physical security range of the access network device, and the authentication is successful. The authentication device can then send an authentication success command to the access network device to control the access network device to communicate with the terminal device based on data messages, such as uploading the terminal device's data messages, thereby enabling the terminal device to successfully access the wireless network.

[0062] Conversely, if the first and second check codes do not match, it can be determined that the terminal device is not within the physical security range of the access network device. In this case, authentication fails, and the authentication device can send an authentication failure instruction to the access network device to instruct the access network device to prohibit communication with the terminal device. For example, the access network device can discard the data packets of the terminal device and not perform any upload or other operations, thereby intercepting the unauthorized access of the terminal device outside the physical security range.

[0063] For example, the authentication device can also determine authentication failure if, within a preset time period after receiving the data packet, the ultrasonic receiver fails to collect an ultrasonic signal, or if the second checksum is not recovered from the ultrasonic signal. In other words, if the terminal device is outside the physical security range and far from the access network device, the ultrasonic signal transmission time is long. By setting a timeout period, if the timeout occurs or reception fails, it indicates that the terminal device is not within the physical security range, and authentication fails. For example, the effective receiving distance of the ultrasonic receiver can be set to less than 15 meters.

[0064] In the aforementioned communication authentication method, the authentication device acquires data packets received by the access network device and generates a first verification code based on the data packets; wherein, the data packets are sent by the terminal device; in addition, the authentication device also acquires a second verification code based on an ultrasonic receiver, which is generated by the terminal device based on the data packets and transmitted through an ultrasonic transmitter; then, it determines whether the first verification code and the second verification code match. If they do, the authentication is successful, and the access network device is controlled to communicate with the terminal device based on the data packets. That is to say, in this embodiment, ultrasonic transmission security verification codes are used. By leveraging the rapid attenuation characteristics and non-wall-penetrating characteristics of ultrasonic waves, a controllable physical complete boundary is constructed, thereby achieving true spatial security isolation. If the terminal device is located within the physical security boundary, it can collect ultrasonic signals and reconstruct the second verification code, thereby completing the communication security verification and passing the authentication. For terminal devices outside the physical security boundary, ultrasonic signals cannot be received, and authentication fails, thereby preventing attackers from accessing the wireless network and thus preventing information leakage. This improves the communication authentication level, enhances the reliability of communication authentication, and ultimately improves communication security.

[0065] In an exemplary embodiment, the authentication device can also support error tolerance configuration. For example, it can set the number of matching retries, or use optional redundant coding to ensure the reliability of ultrasonic communication. In an optional implementation, if the authentication device determines that the first verification code and the second verification code do not match, it can also return to re-execute the step of obtaining the second verification code based on the ultrasonic receiver until the preset number of verifications is reached. That is, in the case of authentication failure, the terminal device can be instructed to resend the ultrasonic signal carrying the second verification code to the authentication device via the ultrasonic transmitter, so that the ultrasonic receiver in the authentication device can re-acquire the ultrasonic signal, and then convert the re-acquired ultrasonic signal to restore the second verification code. If the first verification code and the second verification code match, the authentication is determined to be successful, and the terminal device can successfully access the wireless network for communication.

[0066] For example, if the terminal device still does not match after a preset number of reconnection attempts, it can be marked as a suspicious device and its device identifier can be sent to the administrator's terminal for review. If the administrator verifies that the terminal device is indeed an unauthorized access device, it can be added to the blacklist. If the administrator verifies that the terminal device is not an unauthorized access device, the suspicious device label can be removed, and the terminal device can still attempt to reconnect to the wireless network.

[0067] For example, if the first checksum and the second checksum do not match, the process can return to the step of generating the first checksum based on the data packet until the preset number of checks is reached; alternatively, the process can return to the step of acquiring the data packet received by the access network device until the preset number of checks is reached. In other words, to avoid anomalies in the first checksum, the data packet can be recompressed to generate a new first checksum, or the data packet can be re-received, and a new first checksum can be generated based on the complete data packet, provided that no data is lost.

[0068] In another optional implementation, a second check code can be generated based on redundant coding. That is, the terminal device uses redundant coding to encode and compress the data packet to generate a second check code, and then transmits the second check code in the form of ultrasonic waves through an ultrasonic transmitter. After the ultrasonic receiver in the authentication terminal collects the ultrasonic signal, it restores the ultrasonic signal to ensure that the complete second check code can be accurately restored, thereby improving the reliability of authentication, reducing the number of repeated authentications, and further improving authentication efficiency.

[0069] In one exemplary embodiment, such as Figure 3 As shown, a communication authentication method is provided, which is applied to... Figure 1 Taking a terminal device as an example, the explanation includes the following steps 301 to 303. Wherein:

[0070] Step 301: Obtain the data packet to be sent, send the data packet to the access point device, and instruct the access point device to transmit the data packet to the authentication device.

[0071] The terminal device sends the data packet to be sent to the access point device through the wireless channel, so that the access point device can then transmit the data packet to the authentication device.

[0072] Step 301: Generate a second checksum based on the data packet.

[0073] For example, the terminal device can use a preset verification model to convert the data packet into a second verification code, such as sending the data packet to the preset verification model to output the second verification code. For example, the preset verification model can also be a hash function (hash algorithm) to compress the data packet and generate a second verification code of preset length. Alternatively, redundant encoding can be used to encode and compress the data packet to obtain the second verification code.

[0074] Step 301: The second verification code is sent to the authentication device via the ultrasonic transmitter, so that the authentication device controls the access point device to communicate with the terminal device based on the data packet when it determines that the first verification code and the second verification code match. The first verification code is generated by the authentication device based on the received data packet.

[0075] The ultrasonic transmitter can encode the second checksum using pulse modulation to generate an ultrasonic signal carrying the second checksum information, and then send this ultrasonic signal to the authentication device. The ultrasonic receiver in the authentication device can receive this ultrasonic signal, and then the authentication device can perform digital conversion on the ultrasonic signal to recover the second checksum. Additionally, the authentication device can compress the data packets received by the access network device to generate a first checksum, and match the first checksum with the second checksum. If the match is successful, it indicates that the terminal device is a secure access device, and authentication is successful; if the match fails, it indicates that the terminal device may be an unauthorized access device, and authentication fails.

[0076] In the aforementioned communication authentication method, the terminal device acquires the data packet to be sent, sends the data packet to the access point device, and instructs the access point device to transmit the data packet to the authentication device. Simultaneously, a second verification code is generated based on the data packet and sent to the authentication device via an ultrasonic transmitter. This allows the authentication device to control the access point device to communicate with the terminal device based on the data packet if the first and second verification codes match. The first verification code is generated by the authentication device based on the received data packet. In other words, this embodiment uses ultrasonic waves to transmit the security verification code. Leveraging the rapid attenuation and non-wall-penetrating properties of ultrasonic waves, a controllable physical boundary is constructed, achieving true spatial security isolation. If the terminal device is located within the physical security boundary, it can collect the ultrasonic signal and reconstruct the second verification code, thus completing the communication security verification and passing the authentication. For terminal devices outside the physical security boundary, the ultrasonic signal cannot be received, and authentication fails. This prevents attackers from accessing the wireless network, thereby preventing information leakage, improving the communication authentication level, increasing the reliability of communication authentication, and ultimately enhancing communication security.

[0077] In an optional embodiment, such as Figure 4As shown, a wireless communication authentication system based on ultrasonic content verification is provided. The system includes: a terminal device, an ultrasonic transmitter, an access network device (wireless AP), and an authentication device. The terminal device includes a wireless communication module, and the authentication device includes an ultrasonic receiving module and an authentication module. The ultrasonic receiving module includes an ultrasonic receiver.

[0078] The wireless communication module is used to send raw data packets to the wireless AP via a 2.4G wireless channel;

[0079] An ultrasonic transmitter is used to send the message check code corresponding to the data message through an ultrasonic channel, namely the second check code mentioned above.

[0080] The ultrasonic receiving module is used to receive ultrasonic signals, digitize and restore the second verification code, and transmit the second verification code to the authentication module.

[0081] The authentication module is used to compress the data packets received by the wireless AP to generate a first checksum, and to match the first checksum with a second checksum. If they match, the data packet is allowed to be uploaded; if they do not match, the data packet is discarded.

[0082] It should be noted that, if the matching is successful (i.e., authentication is passed), the authentication device can upload the data packet or send an authentication success command to the wireless AP, instructing the wireless AP to upload the data packet.

[0083] In an optional embodiment, continue to refer to Figure 4 It also provides a complete communication authentication process, including the following steps:

[0084] Step 1: The terminal device generates a data packet and sends the data packet from the wireless channel through the wireless communication module.

[0085] Step 2: The terminal device performs hash compression on the data packet to generate a fixed-length second check code.

[0086] Step 3: Transmit the second verification code in the form of ultrasonic waves using an ultrasonic transmitter.

[0087] Step 4: The authentication device synchronously receives the data packet and the second verification code.

[0088] Step 5: The authentication device rehashes the data packet to obtain the first checksum and compares it with the second checksum.

[0089] Step 6: If a match is found, communication is allowed; otherwise, it is discarded.

[0090] The communication verification logic proposed in this application is as follows: The terminal device compresses the complete wireless message into a 128-bit hash digest value using a hash function and transmits it via an ultrasonic channel. The access point simultaneously receives the wireless message and the acoustic checksum, and compares whether they match. If they match and the timeout period is not exceeded, it confirms that the terminal device is indoors, and only then is the message allowed to enter the main network. In other words, the authentication method based on physical propagation characteristics can determine whether the terminal is located in a physically secure area of ​​the facility, thereby achieving true spatial security isolation, improving the level of communication authentication, and thus enhancing communication security.

[0091] In this embodiment, since ultrasonic waves naturally attenuate quickly, the physical range of communication is limited to indoors, resulting in stronger physical security isolation. In addition, the hash verification mechanism has high accuracy, strong resistance to tampering, and resistance to replay attacks. This solution will not increase the burden on wireless packets, as the ultrasonic channel only transmits verification code data. It is also compatible with existing wireless systems, simple to deploy, and suitable for any network security protection scenario with strict physical isolation requirements, including but not limited to power facilities such as power switching stations, substations, and industrial computer rooms.

[0092] It should be understood that although the steps in the flowcharts of the embodiments described above are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowcharts of the embodiments described above may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the steps or stages of other steps.

[0093] Based on the same inventive concept, this application also provides a communication authentication device for implementing the communication authentication method described above. The solution provided by this device is similar to the implementation described in the above method; therefore, the specific limitations in one or more communication authentication device embodiments provided below can be found in the limitations of the communication authentication method described above, and will not be repeated here.

[0094] In one exemplary embodiment, such as Figure 5 As shown, a communication authentication device is provided, applied to an authentication equipment. The authentication equipment is equipped with an ultrasonic receiver and includes: a generation module 501, an acquisition module 502, and an authentication module 503, wherein:

[0095] The generation module 501 is used to acquire the data packets received by the access network device and generate a first checksum based on the data packets; the data packets are sent by the terminal device.

[0096] The acquisition module 502 is used to acquire a second verification code based on the ultrasonic receiver; the second verification code is generated by the terminal device based on the data packet and transmitted by the ultrasonic transmitter;

[0097] The authentication module 503 is used to determine whether the first check code and the second check code match. If they do, the authentication is successful, and the access network device is controlled to communicate with the terminal device based on the data packet.

[0098] In one embodiment, the acquisition module 502 includes:

[0099] The acquisition unit is used to acquire ultrasonic signals through an ultrasonic receiver.

[0100] The conversion unit is used to digitally convert the ultrasonic signal to obtain the second check code.

[0101] In one embodiment, the authentication module 503 is further configured to, if the first verification code and the second verification code do not match, return to the step of obtaining the second verification code based on the ultrasonic receiver, until a preset number of verifications is reached.

[0102] In one embodiment, the second check code is generated based on redundant coding.

[0103] In one embodiment, the authentication module 503 is further configured to determine authentication failure if, within a preset time period after acquiring the data packet, the ultrasonic receiver fails to acquire the ultrasonic signal, or if the second verification code is not recovered based on the ultrasonic signal.

[0104] In one exemplary embodiment, such as Figure 6 As shown, a communication authentication device is provided, applied to a terminal device. The terminal device is equipped with an ultrasonic transmitter, including: a first transmitting module 601, a generating module 602, and a second transmitting module 603, wherein:

[0105] The first sending module 601 is used to acquire the data packet to be sent, send the data packet to the access point device, and instruct the access point device to transmit the data packet to the authentication device.

[0106] Generation module 602 is used to generate a second check code based on the data packet;

[0107] The second sending module 603 is used to send the second verification code to the authentication device via an ultrasonic transmitter, so that the authentication device, when determining that the first verification code matches the second verification code, controls the access point device to communicate with the terminal device based on the data packet. The first verification code is generated by the authentication device based on the received data packet.

[0108] Each module in the aforementioned communication authentication device can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in or independent of the processor in a computer device, or stored in the memory of a computer device as software, so that the processor can call and execute the operations corresponding to each module.

[0109] In one exemplary embodiment, an authentication device is provided, the internal structure of which can be shown in the following diagram. Figure 7 As shown, the authentication device includes a processor, memory, input / output interface, communication interface, and ultrasonic receiver. The processor, memory, and input / output interface are connected via a system bus, and the communication interface and ultrasonic receiver are also connected to the system bus via the input / output interface. The processor provides computing and control capabilities. The memory includes a non-volatile storage medium and internal memory. The non-volatile storage medium stores the operating system and computer programs. The internal memory provides an environment for the operation of the operating system and computer programs in the non-volatile storage medium. The input / output interface is used for exchanging information between the processor and external devices. The communication interface is used for wired or wireless communication with external access network devices; wireless communication can be achieved through Wi-Fi, mobile cellular networks, Near Field Communication (NFC), or other technologies. The ultrasonic receiver receives ultrasonic signals to recover a second verification code. When executed by the processor, the computer program implements a communication authentication method.

[0110] In one exemplary embodiment, a terminal device is provided, the internal structure of which can be as follows: Figure 8As shown, the terminal device includes a processor, memory, input / output interface, communication interface, display unit, input device, and ultrasonic transmitter. The processor, memory, and input / output interface are connected via a system bus, as are the communication interface, display unit, input device, and ultrasonic transmitter. The processor provides computing and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system and computer programs. The internal memory provides an environment for the operation of the operating system and computer programs stored in the non-volatile storage media. The input / output interface is used for exchanging information between the processor and external devices. The communication interface is used for wired or wireless communication with external terminals; wireless communication can be achieved through Wi-Fi, mobile cellular networks, Near Field Communication (NFC), or other technologies. The ultrasonic transmitter transmits a second verification code to an authentication device in ultrasonic waves. The computer program, when executed by the processor, implements a communication authentication method. The display unit of the terminal device forms a visually visible image and can be a display screen, projection device, or virtual reality imaging device. The display screen can be an LCD screen or an e-ink screen. The input device of the terminal device can be a touch layer covering the display screen, or buttons, trackballs, or touchpads set on the casing of the terminal device, or external keyboards, touchpads, or mice, etc.

[0111] Those skilled in the art will understand that Figure 7 and Figure 8 The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the authentication device and terminal device to which the present application is applied. Specific authentication devices and terminal devices may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0112] In one exemplary embodiment, an authentication device is provided, including a memory, a processor, and an ultrasonic receiver. The memory stores a computer program, and the processor executes the computer program to perform the following steps:

[0113] The system acquires data packets received by the access network device and generates a first checksum based on the data packets; the data packets are sent by the terminal device.

[0114] The second verification code is obtained based on the ultrasonic receiver; the second verification code is generated by the terminal device based on the data packet and transmitted through the ultrasonic transmitter.

[0115] Determine whether the first check code and the second check code match. If they do, the authentication is successful, and control the access network device to communicate with the terminal device based on data packets.

[0116] In one embodiment, the processor also performs the following steps when executing a computer program:

[0117] Ultrasonic signals are acquired using an ultrasonic receiver;

[0118] The ultrasonic signal is digitally converted to obtain the second check code.

[0119] In one embodiment, the processor also performs the following steps when executing a computer program:

[0120] If the first verification code and the second verification code do not match, the process returns to the step of obtaining the second verification code based on the ultrasonic receiver, until the preset number of verifications is reached.

[0121] In one embodiment, the second check code is generated based on redundant coding.

[0122] In one embodiment, the processor also performs the following steps when executing a computer program:

[0123] If the ultrasonic receiver fails to acquire an ultrasonic signal within a preset time period after acquiring the data packet, or if the second verification code is not recovered based on the ultrasonic signal, the authentication is deemed to have failed.

[0124] In one exemplary embodiment, a terminal device is provided, including a memory, a processor, and an ultrasonic transmitter. The memory stores a computer program, and the processor executes the computer program to perform the following steps:

[0125] The system acquires the data packet to be sent, sends the data packet to the access point device, and instructs the access point device to transmit the data packet to the authentication device.

[0126] Generate a second verification code based on the data message;

[0127] The second verification code is sent to the authentication device via an ultrasonic transmitter. When the authentication device determines that the first verification code matches the second verification code, it controls the access point device to communicate with the terminal device based on the data packet. The first verification code is generated by the authentication device based on the received data packet.

[0128] In one embodiment, a computer-readable storage medium is provided having a computer program stored thereon, which, when executed by a processor, implements the steps of the communication authentication method in any of the above embodiments.

[0129] In one embodiment, a computer program product is provided, including a computer program that, when executed by a processor, implements the steps of the communication authentication method in any of the above embodiments.

[0130] It should be noted that the data involved in this application (including but not limited to data used for analysis, data stored, data displayed, etc.) are all information and data that have been fully authorized by all parties, and the collection, use and processing of the relevant data must comply with relevant regulations.

[0131] Those skilled in the art will understand that all or part of the processes in the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium. When executed, the computer program can include the processes of the embodiments described above. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, etc., and are not limited to these.

[0132] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0133] The embodiments described above are merely illustrative of several implementation methods of this application, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of this patent application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.

Claims

1. A communication authentication method, characterized in that, The method, applied to an authentication device equipped with an ultrasonic receiver, includes: The system acquires data packets received by the access network device and generates a first checksum based on the data packets; the data packets are sent by the terminal device. The second verification code is obtained based on the ultrasonic receiver; the second verification code is generated by the terminal device based on the data packet and transmitted through the ultrasonic transmitter. Determine whether the first verification code matches the second verification code. If they do, the authentication is successful, and control the access network device to communicate with the terminal device based on the data packet.

2. The method according to claim 1, characterized in that, The step of obtaining the second verification code based on the ultrasonic receiver includes: Ultrasonic signals are acquired through the ultrasonic receiver; The ultrasonic signal is digitally converted to obtain the second check code.

3. The method according to claim 1, characterized in that, The method further includes: If the first verification code does not match the second verification code, then return to the step of obtaining the second verification code based on the ultrasonic receiver, until the preset number of verifications is reached.

4. The method according to claim 1, characterized in that, The second check code is generated based on redundant encoding.

5. The method according to claim 1, characterized in that, The method further includes: If the ultrasonic receiver fails to acquire an ultrasonic signal within a preset time period after acquiring the data packet, or if the second verification code is not recovered based on the ultrasonic signal, then authentication is deemed to have failed.

6. A communication authentication method, characterized in that, Applied to a terminal device equipped with an ultrasonic transmitter, the method includes: Obtain the data packet to be sent, send the data packet to the access point device, and instruct the access point device to transmit the data packet to the authentication device; A second verification code is generated based on the data message; The second verification code is sent to the authentication device via the ultrasonic transmitter, so that when the authentication device determines that the first verification code matches the second verification code, it controls the access point device to communicate with the terminal device based on the data packet. The first verification code is generated by the authentication device based on the received data packet.

7. A communication authentication device, characterized in that, Applied to authentication equipment, the authentication equipment is equipped with an ultrasonic receiver, the device includes: A generation module is used to acquire data packets received by the access network device and generate a first checksum based on the data packets; the data packets are sent by the terminal device. The acquisition module is used to acquire a second verification code based on the ultrasonic receiver; the second verification code is generated by the terminal device based on the data packet and transmitted through the ultrasonic transmitter; The authentication module is used to determine whether the first verification code and the second verification code match. If they do, the authentication is successful, and the access network device is controlled to communicate with the terminal device based on the data packet.

8. A communication authentication device, characterized in that, Applied to a terminal device equipped with an ultrasonic transmitter, the device includes: The first sending module is used to acquire the data packet to be sent, send the data packet to the access point device, and instruct the access point device to transmit the data packet to the authentication device. The generation module is used to generate a second checksum based on the data packet; The second sending module is used to send the second verification code to the authentication device through the ultrasonic transmitter, so that when the authentication device determines that the first verification code matches the second verification code, it controls the access point device to communicate with the terminal device based on the data packet. The first verification code is generated by the authentication device based on the received data packet.

9. An authentication device, comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, The authentication device is equipped with an ultrasonic receiver, and the processor executes the steps of the method according to any one of claims 1 to 5 when executing the computer program.

10. A terminal device, comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, The terminal device is equipped with an ultrasonic transmitter, and the processor executes the computer program to implement the steps of the method described in claim 6.

Images