Network authentication device

Abstract

The utility model relates to the technical field of communication, and discloses a network authentication device, which comprises an outer shell, a main control chip, an authentication chip and a first Ethernet interface, the main control chip is electrically connected with the first Ethernet interface, receives a network authentication request sent by a network through the first Ethernet interface, and analyzes the network authentication request into a network authentication command. And the authentication chip is in communication connection with the main control chip and is used for receiving the network authentication command from the main control chip and generating a corresponding response value according to the network authentication command, and the response value is returned to a device requesting authentication through the main control chip and the first Ethernet interface. According to the network authentication device, network authentication can be carried out on a plurality of user equipment through a wired or wireless network, the manufacturing cost of the user equipment can be reduced, and the leakage risk of sensitive data of a user is reduced.

Description

Technical Field

[0001] This utility model relates to the field of communication technology, specifically to a network authentication device. Background Technology

[0002] An authentication chip is a security chip used to store sensitive data and calculate the response value of authentication commands based on a preset security algorithm. Devices needing to connect to the system send the calculated response value back to the system. The system determines whether a device can connect by verifying the correctness of the response value sent by the device. Therefore, existing devices that connect to specific systems typically have a dedicated authentication chip. However, with the development of IoT technology, a large number of IoT devices need to send data to specific systems. Installing an authentication chip in every IoT device would not only increase the manufacturing cost of IoT devices, but also, given the typically large deployment range and quantity of IoT devices, hinder the management of sensitive data and could potentially lead to the leakage of sensitive customer data. Utility Model Content

[0003] In order to overcome the shortcomings of the prior art, the purpose of this utility model is to provide a network authentication device that can receive network authentication requests from multiple devices that need to access the network, thereby avoiding the need to set an authentication chip in each device that needs to connect to a specific system. It can be set up in an unattended workstation to automatically authenticate multiple user devices, reduce the manufacturing cost of user devices and facilitate the management of sensitive data.

[0004] To solve the above problems, the technical solution adopted by this utility model is as follows: A network authentication device, comprising: a housing; a first Ethernet interface; a main control chip, disposed in the housing and electrically connected to the first Ethernet interface, receiving network authentication requests sent through the network via the first Ethernet interface and parsing the network authentication requests into network authentication commands; and an authentication chip, disposed in the housing and communicatively connected to the main control chip, for receiving the network authentication commands from the main control chip and generating corresponding response values ​​based on the network authentication commands, the response values ​​being returned to the device requesting authentication via the main control chip and the first Ethernet interface.

[0005] Compared to existing technologies, the advantages of this invention are as follows: The main control chip can access the network through the first Ethernet interface, receive network authentication requests from user equipment via wired or wireless networks, parse the network authentication requests into network authentication commands, and send them to the authentication chip for response value calculation. After calculating the response value, the authentication chip sends it to the device requiring authentication through the main control chip and the first Ethernet interface, enabling the device to access the specific system via the response value fed back by the network authentication device. This network authentication device can perform network authentication for multiple user equipment, thereby avoiding the need to set up an authentication chip in each user equipment, reducing the authentication cost of user equipment, and since the entire system only requires one authentication chip, it facilitates the management of user sensitive data and can prevent the leakage of user sensitive data.

[0006] The aforementioned network authentication device further includes a circuit board within its housing. The first Ethernet interface, the main control chip, and the authentication chip are all mounted on the circuit board. An anti-tamper sensor is also mounted on the circuit board. The anti-tamper sensor is electrically connected to the main control chip and is used to detect whether the circuit board has been separated from the housing.

[0007] In the aforementioned network authentication device, the tamper sensor is a micro switch. When the circuit board is installed inside the housing, the housing presses down the contacts of the tamper sensor, triggering the tamper sensor.

[0008] The aforementioned network authentication device also includes a UART interface, which is electrically connected to the main control chip.

[0009] The aforementioned network authentication device also includes a second Ethernet interface, which is electrically connected to the main control chip.

[0010] In the aforementioned network authentication device, the main control chip communicates with the authentication chip via an SPI interface.

[0011] The aforementioned network authentication device also includes a battery, which powers the main control chip, the authentication chip, and the tamper sensor.

[0012] The present invention will now be described in further detail with reference to the accompanying drawings and specific embodiments. Attached Figure Description

[0013] Figure 1 This is a schematic block diagram of the network authentication device according to an embodiment of the present utility model;

[0014] Figure 2 This is a side view of the network authentication device according to an embodiment of the present utility model;

[0015] Figure 3 This is a top view of the network authentication device according to an embodiment of the present invention.

[0016] Explanation of icon numbers:

[0017] 100 Housing, 200 Circuit Board, 210 Tamper-proof Sensor, 220 First Ethernet Interface, 230 UART Interface, 240 Second Ethernet Interface. Detailed Implementation

[0018] The embodiments of this utility model are described in detail below, with reference to Figures 1 to 3 This utility model provides a network authentication device, including a housing 100, a main control chip and an authentication chip disposed within the housing 100, and a first Ethernet interface 220. The first Ethernet interface 220 is electrically connected to the main control chip. The main control chip receives network authentication requests sent by the user equipment's baseband chip via the network through the first Ethernet interface 220, and depackets the network authentication requests according to the HTTPS protocol to obtain network authentication commands. The authentication chip is communicatively connected to the main control chip, and receives network authentication commands from the main control chip. It calculates the response value of the network authentication command according to a preset security algorithm and feeds back the corresponding value to the main control chip. The main control chip feeds back the response value from the network to the user equipment's baseband chip through the first Ethernet interface 220. The user equipment's baseband chip accesses a specific system such as a server or satellite by sending the response value to such a system.

[0019] The network authentication device of this embodiment can process network authentication requests sent by user devices over the network through a main control chip. After unpacking and parsing the network authentication command, it passes it to the authentication chip to calculate the response value and feed it back to the user device. It can realize online network authentication for multiple user devices through wired or wireless networks, thereby avoiding the need to set up an authentication chip in each user device and reducing the manufacturing cost of user devices. At the same time, since all authentication processes of user devices in the system are handled by the network authentication device, all sensitive data generated by user devices during the authentication process are stored in the authentication chip of the network authentication device, which facilitates the management of user sensitive data and reduces the risk of leakage of user sensitive data through user devices.

[0020] It is understood that the HTTPS protocol used by the main control chip to unpack network authentication requests and package response values ​​is common knowledge in the relevant technical field. The security algorithm of the authentication chip is a verification algorithm that can be designed and adjusted by those skilled in the art according to actual needs, and is also common knowledge in the relevant technical field. The algorithms used by the main control chip and authentication chip in this invention during operation can both be well-known algorithms in the relevant technical field. This invention does not involve any improvement to the working methods of the main control chip and authentication chip.

[0021] In some embodiments, to further prevent the leakage of users' sensitive data and to prevent others from forcibly disassembling the network authentication device to read sensitive data in the authentication chip, an anti-tamper sensor 210 is provided on the circuit board 200 of the main control chip and the authentication chip. The anti-tamper sensor 210 is electrically connected to the main control chip and is used to detect whether the circuit board 200 is separated from the housing 100. If the separation of the circuit board 200 from the housing 100 is detected, it is fed back to the main control chip. When the main control chip receives the signal from the anti-tamper sensor 210, it controls the authentication chip to self-lock and destroys the user's sensitive data, thereby protecting the user's sensitive data. It is understood that the anti-tamper sensor 210 can be a photoelectric sensor or a brightness sensor, etc., to determine whether the circuit board 200 has been removed from the housing 100 by detecting the brightness inside the housing 100 or the distance between the circuit board 200 and the housing 100. (Refer to...) Figure 2 In this embodiment, the tamper sensor 210 is a microswitch, which is located between the circuit board 200 and the housing 100. When the circuit board 200 is inside the housing 100, the contacts of the microswitch are pressed down by the inner wall of the housing 100, causing the microswitch to close or open. When the circuit board 200 is removed from the housing 100, the contacts of the microswitch, no longer subjected to the pressure of the housing 100, self-reset under their own elasticity, thereby feeding back a rising or falling edge electrical signal to the main control chip, informing the main control chip that the network authentication device has been tampered with. In this embodiment, the network authentication device includes two tamper sensors 210, which are distributed at both ends of the network authentication device, so that the removal of the circuit board 200 from either end of the housing 100 of the network authentication device can be quickly detected.

[0022] In some embodiments, a battery is also provided inside the housing 100. The battery is used to continue to supply power to the main control chip, the tamper sensor 210 and the authentication chip when the network authentication device is disconnected from the external power supply, so as to ensure that the tamper protection of the network authentication device can work normally without the external power supply, and to ensure that when the network authentication device is disassembled after the external power supply is disconnected, the sensitive data of the user stored in the authentication chip can be actively deleted.

[0023] Reference Figure 1 In this embodiment, the main control chip and the authentication chip communicate through the SPI interface. The main control chip packs the network authentication command obtained by unpacking through the SPI protocol stack and then passes it to the authentication chip. At the same time, the authentication chip packs the calculated response value through the SPI protocol stack and feeds it back to the main control chip.

[0024] Reference Figure 1 and Figure 2 In this embodiment, the network authentication device also includes a UART interface 230, which is electrically connected to the main control chip and is used to connect to a host computer for software maintenance and updates or hardware driver upgrades of the network authentication device.

[0025] Reference Figure 3 In this embodiment, the network authentication device further includes a second Ethernet interface 240, which is electrically connected to the main control chip. As a reserved backup interface, it can be connected to a host device, allowing the network authentication device to be controlled by the host device. In this embodiment, both the first Ethernet interface 220 and the second Ethernet interface use the RJ45 standard interface.

[0026] It should be noted that in the description of this utility model, any descriptions of orientation, such as up, down, front, back, left, right, etc., indicating orientation or positional relationships, are based on the orientation or positional relationships shown in the accompanying drawings. They are only for the convenience of describing this utility model and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, be constructed or operated in a specific orientation, and should not be construed as a limitation of this utility model.

[0027] In the description of this utility model, "several" means one or more, "multiple" means two or more, "greater than," "less than," and "exceeding" are understood to exclude the stated number, while "above," "below," and "within" are understood to include the stated number. If "first" or "second" is mentioned, it is only for the purpose of distinguishing technical features and should not be construed as indicating or implying relative importance, or implicitly indicating the number of indicated technical features, or implicitly indicating the order of the indicated technical features.

[0028] In the description of this utility model, unless otherwise explicitly defined, terms such as "setting," "installation," and "connection" should be interpreted broadly, and those skilled in the art can reasonably determine the specific meaning of the above terms in this utility model in conjunction with the specific content of the technical solution.

[0029] The above embodiments are merely preferred embodiments of this utility model and should not be construed as limiting the scope of protection of this utility model. Any non-substantial changes and substitutions made by those skilled in the art based on this utility model shall fall within the scope of protection claimed by this utility model.

Claims

1. A network authentication apparatus characterized by comprising: The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device.

2. The network authentication apparatus according to claim 1, wherein The application relates to an authentication chip and a network authentication device.

3. The network authentication apparatus according to claim 2, wherein The application relates to an authentication chip and a network authentication device.

4. The network authentication apparatus of claim 1, wherein The application relates to an authentication chip and a network authentication device.

5. The network authentication device of claim 1, wherein, The application relates to an authentication chip and a network authentication device.

6. The network authentication device of claim 1, wherein, The application relates to an authentication chip and a network authentication device.

7. The network authentication apparatus of claim 2, wherein The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip and a network authentication device. The application relates to an authentication chip

Images