A cellular phone remote trust control method and device for intelligent body

Abstract

The application discloses a kind of cellular phone remote trust control method and device for intelligent organism, it is related to intelligent equipment safety control technical field.The method can be implemented by pure software, pure hardware, firmware, software and hardware combined mode, including: after receiving cellular call, trust admission check is carried out to calling party, non-trust subject call is directly intercepted without sensing;Trust subject call is automatically answered and initial identity verification is started;After verification, enter instruction interaction stage, and real-time continuous identity check is carried out synchronously to each valid instruction, and the check result is strongly bound with instruction execution authority, and the instruction is executed if the check passes, and the phone is hung up if the check fails.The device includes incoming call processing module, identity verification module and instruction gate control execution module which are sequentially communicated.The application realizes the safety management and control of intelligent organism remote control full link, reduces the risk of illegal intrusion and instruction misuse, and is widely adaptable, can cover a variety of implementation scenarios.

Description

Technical Field

[0001] This invention relates to the field of smart device security control technology, and in particular to a method and apparatus for remote trust control of cellular phones for smart devices. Background Technology

[0002] With the rapid development of intelligent robots, industrial intelligent terminals, and home intelligent devices, the application scenarios of remotely controlling intelligent devices via cellular phones are becoming increasingly widespread. Current technologies for remote control of intelligent devices mostly employ a common call answering + manual verification mode, which presents several security risks: calls from untrusted numbers are prone to interference and even illegal intrusion; the identity verification process only performs a single initial check, leaving the call vulnerable to command impersonation and replay attacks; and the verification and command execution processes are not strongly bound, making it easy for verification to be bypassed and illegal commands to be executed.

[0003] Meanwhile, existing solutions are mostly limited to a single hardware or software implementation method, making it difficult to adapt to intelligent devices with different computing power and architectures. They have poor adaptability and limited protection scope, making it difficult to fully cover different implementation scenarios. Summary of the Invention

[0004] The technical problem to be solved by the present invention is to address the above-mentioned shortcomings of the prior art by proposing a cellular phone remote trust control method and device for intelligent devices. This method and device can realize the security management of the entire remote control chain of intelligent devices, reduce the risk of illegal intrusion and command misuse, and can be adapted to various implementation methods to cover different application scenarios of intelligent devices.

[0005] To achieve the above objectives, the present invention adopts the following technical solution: A method for remote trust control of cellular phones for intelligent devices can be implemented through pure software, pure hardware, firmware, or a combination of software and hardware, and includes the following steps: S1. Receive cellular calls, perform trust access verification on the caller, and directly block calls from untrusted entities without generating ringing or audio-visual prompts that are perceptible to the user. S2. The trusted entity will automatically answer incoming calls and initiate the initial identity verification process; S3. After verifying the identity of the caller, the call enters the instruction interaction stage; if the verification fails, the call will be automatically disconnected. S4. During the instruction interaction phase, real-time continuous identity verification is performed synchronously for each valid instruction. The identity verification result is strongly bound to the instruction execution permission. If the verification passes, the corresponding instruction is executed; if the verification fails, the call is automatically disconnected.

[0006] Furthermore, in step S1, the trust access verification is a dual binding verification: the caller's number identifier is compared with the hardware identifier of the caller's device at the same time. Only when the number identifier and the corresponding bound device hardware identifier both match the preset or dynamically configured trust list are they determined to be trusted entities. The device hardware identifier includes one or more of the following: SIM card identifier, terminal device unique serial number, chip ID, and device IMEI.

[0007] Further, in step S2, the initial identity verification process includes: requiring the caller to provide a preset identity verification credential, generating a random dynamic credential and broadcasting it, and requiring the caller to provide the random dynamic credential simultaneously; in step S3, the identity legitimacy verification performs dual verification on the identity verification credential and the random dynamic credential.

[0008] Furthermore, the identity legitimacy verification in step S3 includes initial voiceprint verification, and the real-time continuous identity verification in step S4 includes continuous voiceprint verification. The similarity thresholds for initial voiceprint verification and continuous voiceprint verification are configured independently. After each continuous voiceprint verification is passed, the voiceprint features that passed the verification are fused into the initial voiceprint features with a preset or dynamically configured low weight.

[0009] Furthermore, in step S4, the strong binding between the identity verification result and the instruction execution permission is implemented as follows: the instruction execution link is gated and latched, and only when the signal of continuous identity verification is valid can the instruction enter the arbitration and execution stage; the gated latching logic can be implemented in any way, such as pure hardware circuit, software permission flag bit, or firmware program.

[0010] Furthermore, in step S4, a voice waveform freshness detection is performed simultaneously: the similarity between the current command voice waveform and the recent historical command voice waveform is detected by a sliding window. If the waveform repetition exceeds a preset threshold, it is determined to be a recording replay attack and is handled as a continuous identity verification failure.

[0011] Furthermore, in step S4, if a single continuous identity verification fails, a voice prompt will be given to retry once; if two consecutive continuous identity verifications fail, it will be determined as a verification failure and the call will be automatically disconnected.

[0012] Furthermore, in steps S3 and S4, the number of errors is accumulated after verification or validation failure. When the number of errors reaches a preset or dynamically configured threshold, incoming calls from the caller are rejected for the corresponding lockout duration. The lockout duration corresponding to initial verification failure and continuous validation failure can be configured independently.

[0013] Furthermore, if the call is held, it will be automatically disconnected immediately; if the call continues for more than the preset or dynamically configured maximum duration, it will be automatically disconnected. The configuration operation of the trusted list directly affects the trust access verification logic in step S1, and can be executed through one or more of the following methods: near-field voice, Bluetooth command, and touch operation.

[0014] This invention also provides a remote trust control device for cellular phones for smart devices, comprising a call processing module, an authentication module, and an instruction gating execution module connected in sequence. The call processing module is used to execute the above-mentioned step S1, the authentication module is used to execute the continuous identity verification in the above-mentioned steps S2, S3 and S4, and the instruction gating execution module is used to execute the instruction execution logic in the above-mentioned step S4. Each module can be implemented by pure hardware logic circuits, software programs, firmware, or a combination of hardware and software.

[0015] Compared with the prior art, the present invention has the following beneficial effects: 1. This invention achieves secure management of the entire remote control process through a closed-loop link consisting of trust access verification, initial identity verification, continuous instruction-level verification, and strong binding between verification and execution. This effectively reduces the risks of unauthorized intrusion, instruction impersonation, and recording / replay attacks, thereby improving the security of remote control of intelligent machines.

[0016] 2. The solution of this invention can be adapted to various implementation methods such as pure software, pure hardware, firmware, and a combination of software and hardware. It can cover intelligent devices with different computing power and different architectures, with wider adaptability. At the same time, it fully covers different implementation scenarios and improves the application scope of the solution.

[0017] 3. This invention further enhances the reliability of identity verification and reduces the possibility of being attacked and cracked through auxiliary mechanisms such as random dynamic credentials, dynamic fusion of voiceprint features, and waveform freshness detection; at the same time, through a configurable parameter mechanism, it can adapt to the application requirements of different security levels, making it more flexible. Detailed Implementation

[0019] The present invention will be further described in detail below with reference to specific embodiments.

[0020] This embodiment provides a cellular phone remote trust control method for intelligent devices, which can be implemented through pure software, pure hardware, firmware, or a combination of software and hardware, and is applied to home companion intelligent robots. Specifically, it includes the following steps: S1. The cellular communication module of the intelligent robot receives incoming cellular calls, extracts the caller's mobile phone number from the ringing signal as an identity identifier, and performs trust access verification on the caller; incoming calls from untrusted entities are directly intercepted without triggering the robot's ringing motor, speaker, and indicator lights, and without generating ringing and sound and light prompts that can be perceived by the user.

[0021] The trust access verification adopts a dual binding verification: the caller's mobile phone number is compared with the IMSI identifier of the SIM card of the calling device. Only when the number and the corresponding bound IMSI identifier match the local preset trust list is it determined to be a trusted subject.

[0022] S2. The system automatically answers incoming calls from trusted entities, initiates the initial identity verification process, and broadcasts a prompt tone to the caller via voice synthesis, requesting the caller to provide a preset 6-digit voice password.

[0023] Optionally, during the initial identity verification process, a 4-digit random dynamic digital credential is generated and broadcast simultaneously, requiring the caller to sequentially state the preset voice password and the broadcast random digital credential.

[0024] S3. Verify the identity and legitimacy of the content provided by the caller. If the verification is successful, the call will enter the instruction interaction stage; if the verification fails, the call will be automatically disconnected.

[0025] The identity verification process involves dual verification of the voice password and the random dynamic credential, while also performing initial voiceprint verification by comparing the caller's voiceprint features with the pre-stored legitimate user's voiceprint features.

[0026] S4. During the command interaction phase, for each valid control command spoken by the caller, real-time continuous voiceprint verification is performed simultaneously. The voiceprint verification result is strongly bound to the robot's command execution authority; if the verification passes, the corresponding control command is executed; if the verification fails, the call is automatically disconnected.

[0027] Among them, the result of continuous voiceprint verification precedes the execution of instructions. The instruction execution link is gated and latched. Only when the signal that the continuous voiceprint verification is passed is valid can the instruction enter the execution stage. Simultaneously, the freshness detection of the voice waveform is performed. The similarity between the current instruction voice waveform and the historical waveforms within the previous 10 minutes is detected through a 500ms sliding window. If the repetition exceeds 95%, it is judged as a recording replay attack and is processed as a verification failure.

[0028] Optionally, the similarity thresholds for initial voiceprint verification and continuous voiceprint verification are configured independently. The initial voiceprint verification threshold is set to 85 points, and the continuous voiceprint verification threshold is set to 75 points. After each successful continuous voiceprint verification, the voiceprint features that passed the verification are fused into the initial voiceprint features with a low weight of 10%. After verification or validation failures, the number of errors is accumulated. After reaching the preset threshold of 3 failures, the caller's call is rejected for the corresponding lockout duration. The lockout duration for initial verification failure is 24 hours, and the lockout duration for continuous validation failure is 30 minutes. If the call is held up or exceeds the preset maximum duration of 30 minutes, the call is automatically disconnected immediately.

[0029] This embodiment also provides a remote trust control device for cellular phones for smart devices, including a call processing module, an authentication module, and a command gating execution module that are sequentially connected in communication, wherein: The incoming call processing module is used to perform the incoming call reception, trust access verification and blocking operations in step S1 above; The identity verification module is connected in communication with the call processing module and is used to perform the initial verification process and identity legality verification in steps S2 and S3 above, as well as the continuous identity verification operation in step S4. The instruction gating execution module is connected in communication with the authentication module and is used to execute the instruction execution control and call hang-up operations in step S4 above. The above modules can be implemented through FPGA hardware logic circuits, embedded software programs, chip firmware, or a combination of hardware and software.

[0030] Those skilled in the art will understand that the above embodiments are merely preferred embodiments of the present invention and are not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the protection scope of the present invention.

Claims

1. A method for remote trust control of cellular phones for intelligent devices, which can be implemented through pure software, pure hardware, firmware, or a combination of software and hardware, characterized in that: Includes the following steps: S1. Receive cellular calls, perform trust access verification on the caller, and directly block calls from untrusted entities without generating ringing or audio-visual prompts that are perceptible to the user. S2. The trusted entity will automatically answer incoming calls and initiate the initial identity verification process; S3. After verifying the identity of the caller, the call enters the instruction interaction stage; if the verification fails, the call will be automatically disconnected. S4. During the instruction interaction phase, real-time continuous identity verification is performed synchronously for each valid instruction, and the identity verification result is strongly bound to the instruction execution permission. If the verification passes, the corresponding instruction will be executed; if the verification fails, the call will be automatically disconnected.

2. The method according to claim 1, characterized in that, In step S1, the trust access verification is a dual binding verification: the caller's number identifier is compared with the hardware identifier of the caller's device at the same time. Only when the number identifier and the corresponding bound device hardware identifier both match the preset or dynamically configured trust list are they determined to be trusted entities. The device hardware identifier includes one or more of the following: SIM card identifier, terminal device unique serial number, chip ID, and device IMEI.

3. The method according to claim 1, characterized in that, In step S2, the initial identity verification process includes: requiring the caller to provide a preset identity verification credential, generating a random dynamic credential and broadcasting it, and requiring the caller to provide the random dynamic credential simultaneously; in step S3, the identity legitimacy verification performs dual verification on the identity verification credential and the random dynamic credential.

4. The method according to claim 1, characterized in that, The identity verification in step S3 includes initial voiceprint verification, and the real-time continuous identity verification in step S4 includes continuous voiceprint verification. The similarity thresholds for initial voiceprint verification and continuous voiceprint verification are configured independently. After each continuous voiceprint verification is passed, the voiceprint features that passed the verification are fused into the initial voiceprint features with a preset or dynamically configured low weight.

5. The method according to claim 1, characterized in that, In step S4, the strong binding between the identity verification result and the instruction execution permission is implemented as follows: the instruction execution link is gated and latched, and only when the signal of continuous identity verification is valid can the instruction enter the arbitration and execution stage; the gated latching logic can be implemented in any way, such as pure hardware circuit, software permission flag bit, or firmware program.

6. The method according to claim 1, characterized in that, In step S4, voice waveform freshness detection is performed simultaneously: the similarity between the current command voice waveform and the recent historical command voice waveform is detected by sliding window. If the waveform repetition exceeds the preset threshold, it is determined to be a recording replay attack and is handled as a continuous identity verification failure.

7. The method according to claim 1, characterized in that, In step S4, if a single continuous identity verification fails, a voice prompt will be given to retry once; if two consecutive continuous identity verifications fail, the verification is deemed to have failed and the call will be automatically disconnected.

8. The method according to claim 1, characterized in that, In steps S3 and S4, the number of errors is accumulated after verification or validation failure. When the number of errors reaches a preset or dynamically configured threshold, incoming calls from the caller are rejected for the corresponding lockout duration. The lockout duration corresponding to initial verification failure and continuous validation failure can be configured independently.

9. The method according to claim 1, characterized in that, If the call is held, it will be automatically disconnected immediately. If the call continues for more than the preset or dynamically configured maximum duration, it will be automatically disconnected. The configuration operation of the trusted list directly affects the trust access verification logic in step S1, and can be executed through one or more of the following methods: near-field voice, Bluetooth command, and touch operation.

10. A cellular phone remote trust control device for intelligent devices, characterized in that, The system includes a call processing module, an authentication module, and an instruction gating execution module that are connected in sequence. The call processing module is used to execute step S1 as described in claim 1. The authentication module is used to execute continuous identity verification in steps S2, S3, and S4 as described in claim 1. The instruction gating execution module is used to execute the instruction execution logic in step S4 as described in claim 1. Each module can be implemented through pure hardware logic circuits, software programs, firmware, or a combination of hardware and software.