Terminal device authenticity detection method and apparatus, device, system, and medium
By generating and performing challenging tasks in terminal devices and distinguishing device types using response signal comparison, the problem of distinguishing real physical terminal devices and virtual terminal devices is solved, and the effect of improving the service security of terminal devices is achieved.
Patent Information
- Application Number
- PCT/CN2024/083501
- Authority / Receiving Office
- WO · WO
- Patent Type
- Applications
- Current Assignee / Owner
- Priority Date
- 2023-08-09
- Filing Date
- 2024-03-25
- Publication Date
- 2025-02-13
AI Technical Summary
In the business field of terminal equipment, distinguishing between real physical terminal equipment and virtual terminal equipment has become a major problem, especially in the context of the development of cloud technology, the convenience of adjusting the software environment and interface parameter of virtual terminal equipment leads to a reduction in security.
By generating and performing challenge tasks in the terminal device under test, and comparing the response signals collected by the sensors, we determine whether the device is a real physical terminal device or a virtual terminal device. The specific steps include generating the first and second types of challenge tasks, triggering the device to perform these tasks, and distinguishing them according to the characteristics of the response signal.
Accurate detection of the authenticity of terminal devices is realized, distinguishing between real physical terminal devices and virtual terminal devices, improving the security of terminal device services, and enhancing the resistance of detection methods.
Smart Images

Figure CN2024083501_13022025_PF_FP_ABST
Abstract
Description
Terminal device authenticity detection method, device, equipment, system and medium
[0001] CROSS-REFERENCE TO RELATED APPLICATIONS
[0002] This application claims priority to Chinese patent application 202311002733.4, filed on August 9, 2023, entitled “Method, device, equipment, system and medium for detecting the authenticity of terminal devices,” the entire contents of which are incorporated herein by reference. Technical Field
[0003] The present application relates to the field of electronic information, and in particular to a method, apparatus, device, system and medium for detecting the authenticity of a terminal device. Background Art
[0004] With the continuous development of cloud technology, leveraging the monitoring and migration capabilities it provides, it can be applied to the terminal device business sector. By running terminal device functions through cloud servers, the concept of cloud terminal devices can be realized. The software environment of cloud terminal devices can be consistent with that of real physical terminal devices, and the injection and modification of interface parameters of cloud terminal devices is also very convenient. However, some criminals have exploited the authenticity of the cloud terminal software environment and the ease of adjusting interface parameters to launch attacks, compromising the security of terminal device services. Therefore, distinguishing whether a terminal device is a real physical terminal device or a virtual terminal device has become a major challenge in the terminal device business sector.
[0005] Summary of the Invention
[0006] The embodiments of the present application provide a method, apparatus, device, system, and medium for detecting the authenticity of a terminal device, which can distinguish between real physical terminal devices and virtual terminal devices.
[0007] In a first aspect, an embodiment of the present application provides a method for detecting the authenticity of a terminal device, which is applied to a terminal device under test, and the terminal device under test has a sensor and a target detection application. The method includes: generating three or more challenge tasks through a target detection application, the three or more challenge tasks including a first type of task and a second type of task, the first type of task including at least two identical challenge tasks, and the second type of task including challenge tasks different from the first type of task; triggering the terminal device under test to execute the three or more challenge tasks through the target detection application, and obtaining a response signal corresponding to the challenge task generated by the terminal device under test collected by the sensor; comparing the response signal corresponding to the first type of task with the response signal corresponding to the second type of task through the target detection application, and determining whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison result.
[0008] In the second aspect, an embodiment of the present application provides a method for detecting the authenticity of a terminal device, which is applied to a terminal device under test, and the terminal device under test has a sensor and a target detection application. The method includes: receiving three or more challenge tasks generated and sent by a background server of the target detection application, the three or more challenge tasks including a first type of task and a second type of task, the first type of task including at least two identical challenge tasks, and the second type of task including challenge tasks different from the first type of task; triggering the terminal device under test to execute the three or more challenge tasks through the target detection application, and obtaining a response signal corresponding to the challenge task generated by the terminal device under test collected by the sensor; sending a response signal to the background server, so that the background server compares the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determines whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison result.
[0009] In a third aspect, an embodiment of the present application provides a method for detecting the authenticity of a terminal device, which is applied to a background server of a target detection application, and the terminal device under test has a sensor and a target detection application. The method includes: generating and sending three or more challenge tasks to the terminal device under test, the three or more challenge tasks including a first type of task and a second type of task, the first type of task including at least two identical challenge tasks, and the second type of task including challenge tasks different from the first type of task; receiving a response signal sent by the terminal device under test, the response signal being collected by the sensor when the target detection application triggers the terminal device under test to perform three or more challenge tasks; comparing the response signal corresponding to the first type of task and the response signal corresponding to the second type of task, and determining whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison result.
[0010] In a fourth aspect, an embodiment of the present application provides a device for detecting the authenticity of a terminal device, which is applied to a terminal device under test. The terminal device under test has a sensor and a target detection application. The detection device includes: a challenge task generation module, which is used to generate three or more challenge tasks, and the three or more challenge tasks include a first type of task and a second type of task. The first type of task includes at least two identical challenge tasks, and the second type of task includes challenge tasks different from the first type of task; an information collection module, which is used to trigger the terminal device under test to perform more than three challenge tasks, and obtain a response signal corresponding to the challenge task generated by the terminal device under test collected by the sensor; a data processing module, which is used to compare the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determine whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison result.
[0011] In a fifth aspect, an embodiment of the present application provides a terminal device authenticity detection device, which is applied to a terminal device under test, and the terminal device under test has a sensor and a target detection application. The detection device includes: a receiving module, which is used to receive three or more challenge tasks generated and sent by a background server of the target detection application, the three or more challenge tasks including a first type of task and a second type of task, the first type of task including at least two identical challenge tasks, and the second type of task including challenge tasks different from the first type of task; an information collection module, which is used to trigger the terminal device under test to perform the three or more challenge tasks, and obtain a response signal corresponding to the challenge task generated by the terminal device under test collected by the sensor; a sending module, which is used to send a response signal to the background server, so that the background server compares the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determines whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison result.
[0012] In a sixth aspect, an embodiment of the present application provides a device for detecting the authenticity of a terminal device, which is applied to a background server of a target detection application. The terminal device under test has a sensor and a target detection application. The detection device includes: a challenge task generation module for generating three or more challenge tasks, the three or more challenge tasks including a first type of task and a second type of task, the first type of task including at least two identical challenge tasks, and the second type of task including challenge tasks different from the first type of task; a sending module for sending three or more challenge tasks to the terminal device under test; a receiving module for receiving a response signal sent by the terminal device under test, the response signal being collected by the sensor when the target detection application triggers the terminal device under test to perform three or more challenge tasks; a data processing module for comparing the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determining whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison result.
[0013] In a seventh aspect, an embodiment of the present application provides a terminal device comprising: a processor and a memory storing computer program instructions; and a method for detecting the authenticity of the terminal device according to the first aspect when the processor executes the computer program instructions.
[0014] In an eighth aspect, an embodiment of the present application provides a terminal device comprising: a processor and a memory storing computer program instructions; and a method for detecting the authenticity of the terminal device according to the second aspect when the processor executes the computer program instructions.
[0015] In a ninth aspect, an embodiment of the present application provides a server comprising: a processor and a memory storing computer program instructions; and when the processor executes the computer program instructions, the method for detecting the authenticity of the terminal device according to the third aspect is implemented.
[0016] In the tenth aspect, an embodiment of the present application provides a terminal device authenticity detection system, comprising the terminal device of the eighth aspect and the server of the ninth aspect.
[0017] In the eleventh aspect, an embodiment of the present application provides a computer-readable storage medium, on which computer program instructions are stored. When the computer program instructions are executed by a processor, the method for detecting the authenticity of the terminal device of the first aspect, the method for detecting the authenticity of the terminal device of the second aspect, or the method for detecting the authenticity of the terminal device of the third aspect is implemented.
[0018] An embodiment of the present application provides a method, apparatus, device, system and medium for detecting the authenticity of a terminal device. The terminal device under test can execute three or more pre-generated challenge tasks, wherein the three or more challenge tasks include identical challenge tasks, i.e., first-category tasks, and challenge tasks different from the first-category tasks, i.e., second-category tasks. The terminal device under test is determined to be a real physical terminal device or a virtual terminal device based on a comparison of response signals generated by the terminal device under test executing the first-category tasks and the second-category tasks, which are collected by the sensor of the terminal device under test. The physical unclonable function can enable the real physical terminal device to produce a unique unclonable output to the challenge task. The response signal can reflect the characteristics of the physical unclonable function. The characteristics of the physical unclonable function reflected in the response signals generated by the real physical terminal device when performing the same challenge task and different challenge tasks have certain regularities, while the characteristics of the physical unclonable function reflected in the response signals generated by the virtual terminal device when performing the same challenge task and different challenge tasks are difficult to have regularities or the regularities are different from those of the real physical terminal device. Moreover, a third party simulating the virtual terminal device cannot know the content of the challenge task and the time when the virtual terminal device performs the challenge task, nor can it simulate the characteristics of the physical unclonable function reflected by the response signals generated by the real physical terminal device when performing the same challenge task and different challenge tasks. Therefore, it is possible to accurately determine whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the response signal, thereby realizing the distinction between real physical terminal devices and virtual terminal devices. BRIEF DESCRIPTION OF THE DRAWINGS
[0019] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the following is a brief introduction to the drawings required for use in the embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.
[0020] FIG1 is a flow chart of a method for detecting the authenticity of a terminal device provided in an embodiment of the first aspect of the present application;
[0021] FIG2 is a flow chart of a method for detecting the authenticity of a terminal device provided by another embodiment of the first aspect of the present application;
[0022] FIG3 is a schematic diagram of an architecture of an example of a terminal device authenticity detection method provided in an embodiment of the present application being applied to a terminal device under test;
[0023] FIG4 is a flow chart of a method for detecting the authenticity of a terminal device provided in an embodiment of the second aspect of the present application;
[0024] FIG5 is a flowchart of a method for detecting the authenticity of a terminal device provided in an embodiment of the third aspect of the present application;
[0025] FIG6 is a flowchart of a method for detecting the authenticity of a terminal device provided by another embodiment of the third aspect of the present application;
[0026] FIG7 is a schematic diagram of an architecture of an example of a terminal device authenticity detection method provided in an embodiment of the present application being applied to a tested terminal device and a backend server;
[0027] FIG8 is a flowchart of an example of a process for detecting the authenticity of a terminal device provided in an embodiment of the present application;
[0028] FIG9 is a schematic structural diagram of a terminal device authenticity detection apparatus provided in an embodiment of the fourth aspect of the present application;
[0029] FIG10 is a schematic structural diagram of a terminal device authenticity detection apparatus provided in an embodiment of the fifth aspect of the present application;
[0030] FIG11 is a schematic structural diagram of a terminal device authenticity detection apparatus provided in an embodiment of the sixth aspect of the present application;
[0031] FIG12 is a schematic structural diagram of a terminal device provided in an embodiment of the seventh aspect of the present application;
[0032] Figure 13 is a structural diagram of a terminal device authenticity detection system provided in an embodiment of the tenth aspect of the present application. DETAILED DESCRIPTION
[0033] The features and exemplary embodiments of various aspects of the present application will be described in detail below. In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are only intended to explain the present application, rather than to limit the present application. For those skilled in the art, the present application can be implemented without the need for some of these specific details. The following description of the embodiments is merely to provide a better understanding of the present application by illustrating examples of the present application. It should be noted that the acquisition, storage, use, processing, etc. of information and data in the embodiments of the present application are authorized by the user or relevant agencies and comply with the relevant provisions of national laws and regulations.
[0034] With the continuous development of cloud technology, leveraging the monitoring and migration capabilities it provides, it can be applied to the terminal device business sector. By running terminal device functions through cloud servers, the concept of cloud terminal devices can be realized. The software environment of cloud terminal devices can be consistent with that of real physical terminal devices, and the injection and modification of interface parameters of cloud terminal devices is also very convenient. However, some criminals have exploited the authenticity of the cloud terminal software environment and the ease of adjusting interface parameters to launch attacks, compromising the security of terminal device services. Therefore, distinguishing whether a terminal device is a real physical terminal device or a virtual terminal device has become a major challenge in the terminal device business sector.
[0035] The present application provides a method, apparatus, device, system and medium for detecting the authenticity of a terminal device. By triggering the terminal device under test to perform a challenge task, response information that can reflect the characteristics of the physical unclonable function (PUF) of the terminal device under test is obtained, and the response information of the terminal device under test is used to determine whether the terminal device under test is a real physical terminal device or a virtual terminal device. The physical unclonable function is formed based on the unique physical changes that occur naturally during the manufacturing process of the device in the device. It is technically almost impossible to forge or clone the physical unclonable function of the device. The virtual terminal device cannot simulate the response signal that can reflect the characteristics of the physical unclonable function of the real physical terminal device. The response signal can be used to effectively distinguish between real physical terminal devices and virtual terminal devices.
[0036] The method for detecting the authenticity of a terminal device in the embodiment of the present application can be implemented by the terminal device under test, or can be implemented by the interaction between the terminal device under test and the server, which is not limited here.
[0037] For ease of understanding, a brief description of the terminal device under test and the server is provided here. The terminal device under test includes those that need to be distinguished as either a real physical terminal device or a virtual terminal device. The terminal device under test can include devices such as mobile phones, tablets, and smart watches, and the specific type of the terminal device under test is not limited here. The terminal device under test can be a real physical terminal device or a virtual terminal device. A real physical terminal device is a terminal device that has physical hardware and whose functions are implemented by physical hardware. For example, the central processing unit (CPU), memory, and sensors required to run a program are physical hardware. A virtual terminal device is a terminal device that uses virtual devices to implement its functions. For example, the central processing unit (CPU), memory, and sensors required to run a program are virtual devices simulated by devices such as servers. The virtual terminal device can be a cloud terminal device or a virtual device generated through model simulation. The terminal device under test has a target detection application, and the terminal device authenticity detection method can be introduced through the target detection application, so that the terminal device under test executes the terminal device authenticity detection method on the terminal device under test. The terminal device under test also has sensors. Sensors in real physical terminal devices are real physical sensors, while sensors in virtual terminal devices are virtual sensors. The sensors can sense signals from the terminal device under test. The types of signals that sensors can sense are related to the type of sensor. This application does not limit the types of sensors; all sensors available for IoT devices are within the scope of protection. In some examples, sensors may include, but are not limited to, one or more of the following: magnetic sensors, voice sensors, gravity sensors, gyroscopes, and screen sensors.
[0038] In the embodiment of the present application, the terminal device authenticity detection method is implemented by the interaction between the terminal device under test and the server, and the server is a background server of the target detection application. The background server can execute the terminal device authenticity detection method on the background server side.
[0039] The following describes the terminal device authenticity detection method, apparatus, equipment, system and medium provided in this application.
[0040] In a first aspect, the present application provides a method for detecting the authenticity of a terminal device, which is applied to a terminal device under test. The method for detecting the authenticity of the terminal device can be independently executed by the terminal device under test. The terminal device under test has a sensor and an object detection application. FIG1 is a flowchart of the method for detecting the authenticity of a terminal device provided in an embodiment of the first aspect of the present application. As shown in FIG1 , the method for detecting the authenticity of the terminal device may include steps S101 to S103.
[0041] In step S101 , three or more challenge tasks are generated by an object detection application.
[0042] The target detection application has the function of generating challenge tasks. Challenge tasks are tasks that can be executed by the terminal device under test. In some examples, the challenge tasks may include calculations, for example, the challenge tasks may include multiplication operations on two matrices. The target detection application can randomly select a specified calculation to generate the challenge task. In some examples, a task list can be pre-set, and the task list can include multiple challenge tasks. Three or more challenge tasks can be randomly selected from the task list to generate. The three or more challenge tasks include a first category of tasks and a second category of tasks. The first category of tasks includes at least two identical challenge tasks. The second category of tasks includes challenge tasks that are different from the first category of tasks. In other words, the three or more challenge tasks generated by the target detection application include identical challenge tasks and different challenge tasks. For example, three challenge tasks C1, C2, and C3 are generated by the target detection application, where the task content of challenge task C1 and challenge task C2 is the same, and the task content of challenge task C3 is different from that of challenge task C1. Then the first category of tasks includes challenge tasks C1 and challenge task C2, and the second category of tasks includes challenge task C3. It should be noted that the first category of tasks and the second category of tasks are relative. For example, five challenge tasks C1, C2, C3, C4 and C5 are generated through target detection application, among which the task content of challenge task C1 and challenge task C2 is the same, the task content of challenge task C3 and challenge task C2 is different, the task content of challenge task C4 and challenge task C5 is the same, the task content of challenge task C4 and challenge task C1 is different, and the task content of challenge task C3 and challenge task C4 is different. Then challenge task C1 and challenge task C2 belong to the first category of tasks relative to each other, challenge task C3 belongs to the second category of tasks relative to challenge task C1, challenge task C2, challenge task C4 and challenge task C5, challenge task C4 and challenge task C5 belong to the first category of tasks relative to each other, and challenge task C4 belongs to the second category of tasks relative to challenge task C1 and challenge task C2.
[0043] In step S102, the target detection application is used to trigger the terminal device under test to execute three or more challenge tasks, and a response signal corresponding to the challenge task generated by the terminal device under test and collected by a sensor is obtained.
[0044] The target detection application can trigger the terminal device under test to execute the challenge task generated above. When the terminal device under test executes the challenge task, the internal program excitation will generate a response signal. The response signal is affected by aspects such as the circuit layout in the terminal device under test. The circuit layout and other aspects of each terminal device have unique characteristics. Correspondingly, the response signal generated by each terminal device executing the challenge task also has unique characteristics. The response signals generated by different terminal devices under test for the same challenge task have clearly distinguishable differences. The response signals generated by the same terminal device under test for different challenge tasks also have clearly distinguishable differences. The response signals generated by the same terminal device under test for the same challenge task are basically consistent. Even if there are differences, the differences are within an acceptable error range. In some examples, the response signals in the above embodiments may include electromagnetic signals.
[0045] The sensor of the terminal device under test can collect and obtain the response signal, and the target detection application can be used to obtain the response signal from the sensor so that the response signal can be further processed later.
[0046] In step S103, the target detection application compares the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determines whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the comparison result.
[0047] The response signal may reflect the physical unclonable function. The response signal includes information that may reflect the characteristics of the physical unclonable function, as well as other information in addition to the information that reflects the characteristics of the physical unclonable function. The difference between the response signals generated by a real physical terminal device and a virtual terminal device is primarily reflected in the difference in the characteristics of the physical unclonable function reflected in the response signal. In embodiments of the present application, the uniqueness of the unclonable characteristic of the physical unclonable function reflected in the response signal can be used to determine whether the real physical terminal device is a virtual terminal device.
[0048] In some examples, when comparing response signals corresponding to the first type of task with response signals corresponding to the second type of task, the response signals may first be subjected to general denoising processing to eliminate the influence of background noise on the characteristics of the physical unclonable function reflected in the response signals.
[0049] The physical unclonable function exploits the inherent differences of real physical terminal devices, allowing them to produce a unique, unclonable output for a challenge task. The physical unclonable function is based on the unique physical changes that naturally occur during the manufacturing process of real physical components in real physical terminal devices. Therefore, it is technically almost impossible to forge or clone the physical unclonable function of a real physical terminal device. The response signals generated by the same real physical terminal device performing the same challenge task reflect consistent characteristics of the physical unclonable function. That is, the differences between the characteristics of the physical unclonable function reflected in the response signals generated by the same real physical terminal device performing the same challenge task are very small and within an acceptable error range. The characteristics of the physical unclonable function reflected in the response signals generated by the same real physical terminal device performing different challenge tasks are inconsistent. That is, the differences between the characteristics of the physical unclonable function reflected in the response signals generated by the same real physical terminal device performing the same challenge task are large and outside an acceptable error range. The patterns in the characteristics of the physical unclonable function reflected in the response signals generated by a virtual terminal device when performing the same and different challenge tasks differ from those reflected in the response signals generated by a real physical terminal device when performing the same and different challenge tasks. A virtual terminal device cannot simulate the characteristics of the physical unclonable function reflected in the response signals generated by a real physical terminal when performing challenge tasks. The response signals corresponding to the first and second types of tasks can be used to determine whether the terminal device under test is a real physical terminal device or a virtual terminal device.
[0050] In an embodiment of the present application, the terminal device under test can execute more than three pre-generated challenge tasks, and the three or more challenge tasks include the same challenge tasks, i.e., first-category tasks, and challenge tasks different from the first-category tasks, i.e., second-category tasks. The terminal device under test is determined to be a real physical terminal device or a virtual terminal device based on the comparison of response signals generated by the terminal device under test executing the first-category tasks and the second-category tasks, which are collected by the sensors of the terminal device under test. The physical unclonable function can enable the real physical terminal device to produce a unique unclonable output to the challenge task. The response signal can reflect the characteristics of the physical unclonable function. The characteristics of the physical unclonable function reflected in the response signals generated by the real physical terminal device when performing the same challenge task and different challenge tasks have certain regularities, while the characteristics of the physical unclonable function reflected in the response signals generated by the virtual terminal device when performing the same challenge task and different challenge tasks are difficult to have regularities or the regularities are different from those of the real physical terminal device. Moreover, a third party simulating the virtual terminal device cannot know the content of the challenge task and the time when the virtual terminal device performs the challenge task, nor can it simulate the characteristics of the physical unclonable function reflected by the response signals generated by the real physical terminal device when performing the same challenge task and different challenge tasks. Therefore, it is possible to accurately determine whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the response signal, thereby realizing the distinction between real physical terminal devices and virtual terminal devices.
[0051] In some embodiments, the response signal may include non-correlation information, which is used to express the characteristics of a physical unclonable function. The non-correlation information can be used to distinguish between real physical terminal devices and virtual terminal devices based on the difference between the non-correlation information corresponding to the first type of task, and the difference between the non-correlation information corresponding to the first type of task and the non-correlation information corresponding to the second type of task. Figure 2 is a flowchart of a method for detecting the authenticity of a terminal device provided in another embodiment of the first aspect of the present application. The difference between Figure 2 and Figure 1 is that step S103 in Figure 1 can be specifically refined into steps S1031 to S1034 in Figure 2.
[0052] In step S1031 , common characteristic factors affecting the sensors are obtained.
[0053] The common characteristic factors of sensors include common characteristic factors that may affect this type of sensor. For example, if the sensor includes a magnetic sensor, the common characteristic factors of the sensors may include the geographic location of the terminal device under test; if the sensor includes a voice sensor, the common characteristic factors of the sensors may include the content of the voice sentence input to the terminal device under test; if the sensor includes a gravity sensor and / or a gyroscope, the common characteristic factors of the sensors may include the posture information of the terminal device under test, etc.
[0054] The response signals collected by sensors contain information influenced by their shared characteristics. This information is part of the response signal. These shared characteristics are not unique to each sensor, and the impact of these shared characteristics on the response signal is minimal in distinguishing between real physical devices and virtual devices.
[0055] In step S1032, the response signal is separated according to the common characteristic factors to obtain correlation information and non-correlation information.
[0056] Correlation information is calculated based on shared characteristic factors. It reflects the influence of shared characteristic factors on a class of sensors. Correlation information can be calculated based on shared characteristic factors and separated from the response signal. The remaining portion of the response signal is non-correlation information. For example, if the sensor includes a magnetic sensor and the shared characteristic factor includes geographic location, geomagnetic information of the tested terminal device at that geographic location can be calculated based on the geographic location of the tested terminal device. The calculated geomagnetic information can be determined as correlation information, separated from the response signal, and the remaining portion of the response signal is non-correlation information.
[0057] Correlation information is characterized by linearity. Irrelevant information is characterized by nonlinearity. It reflects the unique characteristics of the sensor itself, and thus the unique characteristics of the terminal device under test. Non-correlation information can also be composed of two parts: nonlinear characteristics caused by subtle differences in the sensor itself, and nonlinear characteristics in the response signal collected by the sensor due to random noise in the input of the terminal device performing the challenge task. Non-correlation information is used to express the characteristics of a physical unclonable function and cannot be simulated through modeling.
[0058] In some examples, prior to step S1031, the response signal may be subjected to general denoising to obtain a denoised response signal. The general denoising may be used to remove background noise. In some examples, a differential signal may be used to remove background noise from the response signal. In step S1032, the denoised response signal may be separated to obtain correlation information and non-correlation information.
[0059] In step S1033 , the non-correlation information corresponding to the first type of tasks is compared, and the non-correlation information corresponding to the first type of tasks and the non-correlation information corresponding to the second type of tasks are compared to obtain a comparison result.
[0060] Non-correlation information can express the characteristics of a physical unclonable function. The non-correlation information in the response signals generated by a real physical terminal device performing the same challenge task is consistent, and the non-correlation information in the response signals generated by performing different challenge tasks is inconsistent. Therefore, by comparing the non-correlation information corresponding to the first type of task, and comparing the non-correlation information corresponding to the first type of task with the non-correlation information corresponding to the second type of task, a comparison result that can be used to determine the authenticity of the terminal device under test can be obtained. The comparison result can indicate whether the non-correlation information corresponding to the first type of task is consistent, and whether the non-correlation information corresponding to the first type of task is consistent with the non-correlation information corresponding to the second type of task.
[0061] In step S1034 , based on the comparison result, it is determined whether the terminal device under test is a real physical terminal device or a virtual terminal device.
[0062] When the difference between the non-correlation information corresponding to the first type of task is within the preset error range, and the difference between the non-correlation information corresponding to the second type of task and the non-correlation information corresponding to the first type of task is outside the preset error range, it is determined that the terminal device under test is a real physical terminal device.
[0063] The preset error range is an acceptable error range for determining whether non-correlation information is consistent. Its value can be set based on the scenario, needs, experience, etc., and is not limited here. If the difference between the non-correlation information in the response signals corresponding to any two challenge tasks is within the preset error range, the non-correlation information in the response signals corresponding to the two challenge tasks can be considered consistent. Similarly, if the difference between the non-correlation information in the response signals corresponding to any two challenge tasks is outside the preset error range, the non-correlation information in the response signals corresponding to the two challenge tasks can be considered inconsistent.
[0064] The non-correlation information in the response signals generated by the same real physical terminal device performing the same challenge task is consistent, while the non-correlation information in the response signals generated by the same real physical terminal device performing different challenge tasks is inconsistent. Therefore, if the difference between the non-correlation information corresponding to the first type of task is within a preset error range, and the difference between the non-correlation information corresponding to the second type of task and the non-correlation information corresponding to the first type of task is outside the preset error range, it can be determined that the terminal device under test meets the characteristics of a real physical terminal device and is a real physical terminal device.
[0065] When the difference between the non-correlation information corresponding to the first type of task is outside the preset error range, and / or the difference between the non-correlation information corresponding to the second type of task and the non-correlation information corresponding to the first type of task is within the preset error range, the terminal device under test is determined to be a virtual terminal device.
[0066] If the difference between the non-correlation information corresponding to the first type of task is outside the preset error range, it indicates that the non-correlation information in the response signal generated by the tested terminal when executing the same challenge task is inconsistent. If the difference between the non-correlation information corresponding to the second type of task and the non-correlation information corresponding to the first type of task is within the preset error range, it indicates that the non-correlation information in the response signal generated by the tested terminal when executing different challenge tasks is consistent. If at least one of the above two situations occurs, it can be determined that the tested terminal device does not meet the characteristics of a real physical terminal device, the tested terminal device is a virtual terminal device, and the operation of the tested terminal device may be a data injection attack or other abnormal behavior.
[0067] For example, the terminal device under test performs challenge tasks C1, C2, and C3, respectively, wherein the task contents of challenge tasks C1 and C2 are the same, while the task contents of challenge tasks C3 and C2 are different. The non-correlation information in the response signal generated by the terminal device under test when performing challenge task C1, collected by the sensor, is R1; the non-correlation information in the response signal generated by the terminal device under test when performing challenge task C2, collected by the sensor, is R2; and the non-correlation information in the response signal generated by the terminal device under test when performing challenge task C3, collected by the sensor, is R3. If the difference between non-correlation information R1 and non-correlation information R2 is within a preset error range, and the difference between non-correlation information R2 and non-correlation information R3 is outside the preset error range, the terminal device under test can be determined to be a real physical terminal device. If the difference between non-correlation information R1 and non-correlation information R2 is outside the preset error range, and / or the difference between non-correlation information R2 and non-correlation information R3 is within the preset error range, the terminal device under test can be determined to be a virtual terminal device.
[0068] In some embodiments, when multiple terminal devices under test are virtual terminal devices, it is further possible to determine whether the multiple virtual terminal devices are simulated by the same cloud platform so that appropriate security protection measures can be taken. If multiple terminal devices under test are determined to be virtual terminal devices within a preset time period, the target detection application can be used to obtain characteristics of the physical unclonable function of the multiple terminal devices under test based on response signals corresponding to three or more challenge tasks performed by each terminal device under test. If the differences between the characteristics of the physical unclonable function of the multiple terminal devices under test are within a preset characteristic error range, it is determined that the multiple terminal devices under test were simulated based on the same cloud platform.
[0069] If multiple virtual terminal devices are discovered, they may belong to the same cloud terminal device pool, where the virtual terminal devices are generated based on the same cloud platform. Simulating a large number of virtual terminal devices on the same cloud platform poses the risk of exploiting these devices for unusual attacks. Identifying virtual terminal devices generated by the same cloud platform facilitates subsequent monitoring of services generated by these virtual terminal devices. The characteristics of the physical unclonable functions of virtual terminal devices simulated by the same cloud platform are very similar. Based on the response signals obtained from the virtual terminal devices performing the challenge task, characteristics of the physical unclonable functions that characterize the virtual terminal devices themselves can be derived. If the characteristics of the physical unclonable functions of multiple virtual terminal devices are consistent, it can be determined that the multiple virtual terminal devices were simulated based on the same cloud platform. Consistency in the characteristics of the physical unclonable functions can include both similar and identical characteristics. The preset characteristic error range is an acceptable error range for determining consistency in the characteristics of the physical unclonable functions. Its value can be set based on scenarios, requirements, experience, and other factors, and is not limited here. If the differences between the characteristics of the physical unclonable functions of multiple virtual terminal devices are within the preset characteristic error range, it indicates that the characteristics of the physical unclonable functions of the multiple virtual terminal devices are consistent.
[0070] In some examples, when the method for detecting the authenticity of a terminal device is independently executed by the terminal device under test, the terminal device under test may include functional modules such as a challenge task generation module, an information collection module, and a data processing module. Figure 3 is an architectural diagram of an example of the method for detecting the authenticity of a terminal device provided in an embodiment of the present application being applied to a terminal device under test. As shown in Figure 3, the terminal device under test 20 may include a challenge task generation module 21, an information collection module 22, and a data processing module 23. The functions of the challenge task generation module 21, the information collection module 22, and the data processing module 23 may be integrated into the target detection application 24. The terminal device under test 20 may also include a sensor 25, a central processing unit, a memory, and other chips 26. The information collection module 22 can communicate and interact with the challenge task generation module 21, the data processing module 23, the sensor 25, the central processing unit, the memory, and other chips 26. The challenge task generation module 21 is used to generate a challenge task and transmit the challenge task number to the information collection module 22; the central processing unit and memory and other chips 26 can be used to execute the challenge task under the triggering of the information collection module 22; the sensor 25 can be used to collect response signals; the information collection module 22 can be used to initiate a challenge task to the central processing unit and memory and other chips 26, obtain the response signal from the sensor 25 and transmit the response signal to the data processing module 23; the data processing module 23 can be used to distinguish between real physical terminal devices and virtual terminal devices based on the response signal.
[0071] The method for detecting the authenticity of a terminal device can be implemented by the interaction between the terminal device under test and the background server. The second aspect of the present application provides a method for detecting the authenticity of a terminal device, which is applied to the terminal device under test that interacts with the background server. The terminal device under test has a sensor and a target detection application. Figure 4 is a flow chart of the method for detecting the authenticity of a terminal device provided in an embodiment of the second aspect of the present application. As shown in Figure 4, the method for detecting the authenticity of a terminal device may include steps S301 to S303.
[0072] In step S301 , three or more challenge tasks generated and sent by a background server of an object detection application are received.
[0073] The backend server generates three or more challenge tasks and sends them to the terminal device under test. The three or more challenge tasks include first-category tasks and second-category tasks. The first-category tasks include at least two identical challenge tasks. The second-category tasks include challenge tasks that are different from the first-category tasks.
[0074] In step S302, the target detection application is used to trigger the terminal device under test to execute three or more challenge tasks, and a response signal corresponding to the challenge task generated by the terminal device under test and collected by a sensor is obtained.
[0075] In step S303, a response signal is sent to the background server so that the background server compares the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determines whether the tested terminal device is a real physical terminal device or a virtual terminal device according to the comparison result.
[0076] Compared with the method for detecting the authenticity of a terminal device in the embodiment of the first aspect, the method for detecting the authenticity of a terminal device in the embodiment of the second aspect of this application is the method in which some steps originally executed by the terminal device under test in the embodiment of the first aspect are handed over to the background server for execution. Except for the execution subject, the details of the steps are basically the same. The specific contents of the above steps S301 to S303 can be referred to the relevant descriptions in the above embodiments and will not be repeated here.
[0077] In an embodiment of the present application, the background server can generate more than three challenge tasks, and the terminal device under test can execute more than three challenge tasks. The three or more challenge tasks include the same challenge tasks, i.e., first-category tasks, and challenge tasks different from the first-category tasks, i.e., second-category tasks. The terminal device under test can send a response signal generated by the terminal device under test executing the challenge task collected by the sensor to the background server, and the background server determines whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the response signal. The physical unclonable function can enable a real physical terminal device to produce a unique unclonable output to a challenge task, and the response signal can reflect the characteristics of the physical unclonable function. The characteristics of the physical unclonable function reflected in the response signals generated by the real physical terminal device when performing the same challenge task and different challenge tasks have certain regularities, while the characteristics of the physical unclonable function reflected in the response signals generated by the virtual terminal device when performing the same challenge task and different challenge tasks are difficult to have regularities or the regularities are different from those of the real physical terminal device. Moreover, a third party simulating a virtual terminal device cannot know the content of the challenge task and the time when the virtual terminal device performs the challenge task, nor can it simulate the characteristics of the physical unclonable function reflected by the response signals generated by the real physical terminal device when performing the same challenge task and different challenge tasks. Therefore, it is possible to accurately determine whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the response signal, thereby achieving the distinction between real physical terminal devices and virtual terminal devices, and also improving the anti-attack ability of the terminal device authenticity detection method.
[0078] In some examples, the response signal includes non-correlation information, and the non-correlation information is used to express the characteristics of a physical unclonable function. When the difference between the non-correlation information corresponding to the first type of task is within a preset error range, and the difference between the non-correlation information corresponding to the second type of task and the non-correlation information corresponding to the first type of task is outside the preset error range, the terminal device under test is a real physical terminal device. When the difference between the non-correlation information corresponding to the first type of task is outside the preset error range, and / or the difference between the non-correlation information corresponding to the second type of task and the non-correlation information corresponding to the first type of task is within the preset error range, the terminal device under test is a virtual terminal device. For details, please refer to the relevant description in the above embodiments, which will not be repeated here.
[0079] In some examples, the response signal is separated into correlation information and non-correlation information by the backend server, and the correlation information is calculated by the backend server based on the common characteristic factors of the sensors. For details, please refer to the relevant description in the above embodiment and will not be repeated here.
[0080] In some examples, the response signal separated into the correlation information and the non-correlation information is the response signal after the background server performs a general denoising process. For details, please refer to the relevant description in the above embodiment, which will not be repeated here.
[0081] In some examples, when multiple tested terminal devices are determined to be virtual terminal devices, if the differences between the characteristics of the physical unclonable function of the multiple tested terminal devices are within a preset characteristic error range, the multiple tested terminal devices are simulated based on the same cloud platform, and the characteristics of the physical unclonable function are obtained by the backend server based on response signals corresponding to three or more challenge tasks executed by the multiple tested terminal devices. For details, please refer to the relevant descriptions in the above embodiments and will not be repeated here.
[0082] A method for detecting the authenticity of a terminal device can be implemented by the interaction between the terminal device under test and a background server. A third aspect of this application provides a method for detecting the authenticity of a terminal device. This method for detecting the authenticity of a terminal device is applied to a background server that interacts with the terminal device under test, and this background server is the background server of a target detection application in the terminal device under test. Figure 5 is a flow chart of a method for detecting the authenticity of a terminal device provided in an embodiment of the third aspect of this application. As shown in Figure 5, this method for detecting the authenticity of a terminal device may include steps S401 to S403.
[0083] In step S401, three or more challenge tasks are generated and sent to the terminal device under test.
[0084] The three or more challenge tasks include first-category tasks and second-category tasks. The first-category tasks include at least two identical challenge tasks. The second-category tasks include challenge tasks that are different from the first-category tasks.
[0085] In step S402, a response signal sent by the terminal device under test is received.
[0086] The response signal is collected by the sensor when the target detection application triggers the terminal device under test to perform more than three challenge tasks.
[0087] In step S403, a comparison is performed between the response signal corresponding to the first type of task and the response signal corresponding to the second type of task, and it is determined whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison result.
[0088] Compared with the method for detecting the authenticity of a terminal device in the embodiment of the first aspect, the method for detecting the authenticity of a terminal device in the embodiment of the third aspect of this application is different. In this method, the background server executes some steps originally executed by the terminal device under test in the embodiment of the first aspect. Except for the different execution subjects, the details of the steps are basically the same. The specific contents of the above steps S401 to S403 can be referred to the relevant descriptions in the above embodiments and will not be repeated here.
[0089] In an embodiment of the present application, the background server can generate more than three challenge tasks, and the terminal device under test can execute more than three challenge tasks. The three or more challenge tasks include the same challenge tasks, i.e., first-category tasks, and challenge tasks different from the first-category tasks, i.e., second-category tasks. The terminal device under test can send a response signal generated by the terminal device under test executing the challenge task collected by the sensor to the background server, and the background server determines whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the response signal. The physical unclonable function can enable the real physical terminal device to produce a unique unclonable output for the challenge task. The response signal can reflect the characteristics of the physical unclonable function. The characteristics of the physical unclonable function reflected in the response signals generated by the real physical terminal device when performing the same challenge task and different challenge tasks have certain regularities, while the characteristics of the physical unclonable function reflected in the response signals generated by the virtual terminal device when performing the same challenge task and different challenge tasks are difficult to have regularities or the regularities are different from those of the real physical terminal device. Moreover, a third party simulating the virtual terminal device cannot know the content of the challenge task and the time when the virtual terminal device performs the challenge task, nor can it simulate the characteristics of the physical unclonable function reflected by the response signals generated by the real physical terminal device when performing the same challenge task and different challenge tasks. Therefore, it is possible to accurately determine whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the response signal, thereby realizing the distinction between real physical terminal devices and virtual terminal devices, and also improving the anti-attack ability of the terminal device authenticity detection method.
[0090] In some embodiments, the response signal includes non-correlation information, which is used to express the characteristics of a physical unclonable function. Based on the difference between the non-correlation information in the response signal corresponding to the first type of task, and the difference between the non-correlation information in the response signal corresponding to the first type of task and the non-correlation information in the response signal corresponding to the second type of task, a real physical terminal device and a virtual terminal device can be distinguished. Figure 6 is a flowchart of a method for detecting the authenticity of a terminal device provided in another embodiment of the third aspect of the present application. The difference between Figure 6 and Figure 5 is that step S403 in Figure 5 can be specifically refined into steps S4031 to S4034 in Figure 6.
[0091] In step S4031, common characteristic factors affecting the sensor are obtained.
[0092] In step S4032, the response signal is separated based on the common characteristic factors to obtain correlation information and non-correlation information.
[0093] Correlation information is calculated based on shared characteristic factors.
[0094] In some examples, before step S4032, the response signal may be subjected to general denoising to obtain a general denoised response signal. Accordingly, in step S4032, the general denoised response signal may be separated based on common feature factors to obtain correlation information and non-correlation information.
[0095] In step S4033 , the non-correlation information corresponding to the first type of tasks is compared, and the non-correlation information corresponding to the first type of tasks and the non-correlation information corresponding to the second type of tasks are compared to obtain a comparison result.
[0096] In step S4034, based on the comparison result, it is determined whether the terminal device under test is a real physical terminal device or a virtual terminal device.
[0097] When the difference between the non-correlation information corresponding to the first type of task is within the preset error range, and the difference between the non-correlation information corresponding to the second type of task and the non-correlation information corresponding to the first type of task is outside the preset error range, it is determined that the terminal device under test is a real physical terminal device.
[0098] When the difference between the non-correlation information corresponding to the first type of task is outside the preset error range, and / or the difference between the non-correlation information corresponding to the second type of task and the non-correlation information corresponding to the first type of task is within the preset error range, the terminal device under test is determined to be a virtual terminal device.
[0099] The specific contents of the above steps S4031 to S4034 can be found in the relevant descriptions in the above embodiments, which will not be repeated here.
[0100] In some embodiments, if the backend server determines that multiple tested terminal devices are virtual terminal devices, it can also obtain characteristics of the physical unclonable function of the multiple tested terminal devices based on the response signals corresponding to three or more challenge tasks performed by each tested terminal device; if the difference between the characteristics of the physical unclonable function of the multiple tested terminal devices is within a preset characteristic error range, it is determined that the multiple tested terminal devices are simulated based on the same cloud platform. For details, please refer to the relevant description in the above embodiments and will not be repeated here.
[0101] In some examples, when the method for detecting the authenticity of a terminal device is implemented by the interaction between the terminal device under test and the background server, the terminal device under test may include functional modules such as an information collection module, and the background server may include functional modules such as a challenge task generation module and a data processing module. Figure 7 is an architectural diagram of an example of the method for detecting the authenticity of a terminal device provided in an embodiment of the present application being applied to a terminal device under test and a background server. As shown in Figure 7, the terminal device under test 51 may include an information collection module 511, which may be integrated into a target detection application 512. The terminal device under test 51 may also include a sensor 513, a central processing unit, a memory, and other chips 514; the background server 52 of the target detection application 512 may include a challenge task generation module 521 and a data processing module 522. The background server 52 may be a cloud server, and the background server 52 may communicate with the terminal device under test 51 through a cloud application service 53. The information collection module 511 may communicate and interact with the challenge task generation module 521, the data processing module 522, the sensor 513, the central processing unit, the memory, and other chips 514. The terminal device 51 under test can submit a detection request to the background server 52 through the cloud application service 53; the challenge task generation module 521 is used to generate a challenge task and transmit the challenge task number to the information collection module 511; the central processing unit and memory and other chips 514 can be used to execute the challenge task under the triggering of the information collection module 511; the sensor 513 can be used to collect response signals; the information collection module 511 can be used to initiate a challenge task to the central processing unit and memory and other chips 514, obtain the response signal from the sensor 513 and transmit the response signal to the data processing module 522; the data processing module 522 can be used to distinguish between real physical terminal devices and virtual terminal devices based on the response signal.
[0102] For ease of understanding, an example is used here to illustrate the process of detecting the authenticity of a terminal device implemented by the interaction between the terminal device under test and the background server. Figure 8 is a flowchart of an example of the process of detecting the authenticity of a terminal device provided by an embodiment of the present application. As shown in Figure 8, the terminal device under test includes an execution part and an information collection module. The execution part mainly includes sensors, a central processing unit, and a memory for executing challenge tasks; the background server includes a challenge task generation module and a data processing module. The process of detecting the authenticity of the terminal device may include steps a1 to a8.
[0103] In step a1, the challenge task generation module randomly generates challenge tasks C1, C2 and C3, and transmits the challenge tasks C1, C2 and C3 to the information collection module.
[0104] Challenge task C1 is the same as challenge task C2, and challenge task C3 is different from challenge task C2.
[0105] In step a2, the information collection module takes the challenge tasks C1, C2, C3 and random noise as input, and stimulates the execution part to execute the challenge tasks C1, C2 and C3.
[0106] In step a3, the execution part collects response signals generated by executing the challenge tasks C1, C2 and C3, and transmits the response signals to the information collection module.
[0107] In step a4, the information collection module sends the response signal to the data processing module.
[0108] In step a5, the data processing module dynamically calculates the response signal to remove background noise.
[0109] In step a6, the data processing module separates the response signal to obtain a correlation part and a non-correlation part, thereby obtaining non-correlation information R1, R2 and R3.
[0110] The non-relevant part is non-relevant information. Non-relevant information R1 corresponds to challenge task C1, non-relevant information R2 corresponds to challenge task C2, and non-relevant information R3 corresponds to challenge task C3.
[0111] In step a7, the data processing module compares the non-correlation information R1, R2 and R3, determines whether R1=R2≠R3 is satisfied, and obtains the detection result of the terminal device under test.
[0112] R1=R2 means that the difference between the non-correlation information R1 and the non-correlation information R2 is within a preset error range, and R2≠R3 means that the difference between the non-correlation information R2 and the non-correlation information R3 is outside the preset error range. The test result can indicate whether the tested terminal device is a real physical terminal device or a virtual terminal device.
[0113] In step a8, the data processing module sends the detection results to the information collection module.
[0114] The specific contents of the above steps a1 to a8 can be found in the relevant descriptions in the above embodiments, which will not be repeated here.
[0115] The fourth aspect of the present application provides a terminal device authenticity detection device, which corresponds to the terminal device authenticity detection method provided in the first aspect of the present application and can be applied to the terminal device under test. The terminal device under test has a sensor and a target detection application. Figure 9 is a structural schematic diagram of the terminal device authenticity detection device provided in an embodiment of the fourth aspect of the present application. As shown in Figure 9, the terminal device authenticity detection device 600 may include a challenge task generation module 601, an information collection module 602 and a data processing module 603.
[0116] The challenge task generation module 601 can be used to generate three or more challenge tasks, which include first-category tasks and second-category tasks. The first-category tasks include at least two identical challenge tasks, and the second-category tasks include challenge tasks different from the first-category tasks.
[0117] The information collection module 602 may be used to trigger the terminal device under test to execute three or more challenge tasks, and obtain response signals corresponding to the challenge tasks generated by the terminal device under test and collected by sensors.
[0118] The data processing module 603 may be configured to compare the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determine whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison result.
[0119] In an embodiment of the present application, the terminal device under test can execute more than three pre-generated challenge tasks, and the three or more challenge tasks include the same challenge tasks, i.e., first-category tasks, and challenge tasks different from the first-category tasks, i.e., second-category tasks. The terminal device under test is determined to be a real physical terminal device or a virtual terminal device based on the comparison of response signals generated by the terminal device under test executing the first-category tasks and the second-category tasks, which are collected by the sensors of the terminal device under test. The physical unclonable function can enable a real physical terminal device to produce a unique unclonable output to a challenge task, and the response signal can reflect the characteristics of the physical unclonable function. The characteristics of the physical unclonable function reflected in the response signals generated by the real physical terminal device when performing the same challenge task and different challenge tasks have certain regularities, while the characteristics of the physical unclonable function reflected in the response signals generated by the virtual terminal device when performing the same challenge task and different challenge tasks are difficult to have regularities or the regularities are different from those of the real physical terminal device. Moreover, a third party simulating a virtual terminal device cannot know the content of the challenge task and the time when the virtual terminal device performs the challenge task, nor can it simulate the characteristics of the physical unclonable function reflected by the response signals generated by the real physical terminal device when performing the same challenge task and different challenge tasks. Therefore, it is possible to accurately determine whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the response signal, thereby achieving the distinction between real physical terminal devices and virtual terminal devices, and also improving the anti-attack ability of the terminal device authenticity detection method.
[0120] In some examples, the response signal includes non-correlation information, which is used to express characteristics of a physical unclonable function. If the difference between the non-correlation information corresponding to the first type of task is within a preset error range, and the difference between the non-correlation information corresponding to the second type of task and the non-correlation information corresponding to the first type of task is outside the preset error range, the terminal device under test is a real physical terminal device. If the difference between the non-correlation information corresponding to the first type of task is outside the preset error range, and / or the difference between the non-correlation information corresponding to the second type of task and the non-correlation information corresponding to the first type of task is within the preset error range, the terminal device under test is a virtual terminal device.
[0121] In some examples, the data processing module 603 can be specifically used to: obtain common characteristic factors that affect the sensor; based on the common characteristic factors, separate the response signal to obtain correlation information and non-correlation information, the correlation information is calculated based on the common characteristic factors, and the non-correlation information is used to express the characteristics of the physical unclonable function; compare the non-correlation information corresponding to the first type of task, and compare the non-correlation information corresponding to the first type of task with the non-correlation information corresponding to the second type of task to obtain a comparison result; based on the comparison result, determine whether the terminal device under test is a real physical terminal device or a virtual terminal device.
[0122] In some examples, the data processing module 603 may also be used to perform universal denoising on the response signal to obtain a universal denoising-processed response signal before separating the response signal to obtain correlation information and non-correlation information based on common characteristic factors.
[0123] In some embodiments, the data processing module 603 can also be used to: when it is determined that multiple terminal devices under test are virtual terminal devices, obtain the characteristics of the physical unclonable functions of the multiple terminal devices under test based on the response signals corresponding to more than three challenge tasks performed by each terminal device under test; if the difference between the characteristics of the physical unclonable functions of the multiple terminal devices under test is within a preset characteristic error range, determine that the multiple terminal devices under test are simulated based on the same cloud platform.
[0124] The fifth aspect of the present application provides a terminal device authenticity detection device, which corresponds to the terminal device authenticity detection method provided in the second aspect of the present application and can be applied to the terminal device under test. The terminal device under test has a sensor and a target detection application. Figure 10 is a structural schematic diagram of the terminal device authenticity detection device provided in an embodiment of the fifth aspect of the present application. As shown in Figure 10, the terminal device authenticity detection device 700 may include a receiving module 701, an information collection module 702 and a sending module 703.
[0125] The receiving module 701 can be used to receive more than three challenge tasks generated and sent by the background server of the target detection application. The more than three challenge tasks include first-category tasks and second-category tasks. The first-category tasks include at least two identical challenge tasks, and the second-category tasks include challenge tasks different from the first-category tasks.
[0126] The information collection module 702 may be used to trigger the terminal device under test to execute three or more challenge tasks, and obtain response signals corresponding to the challenge tasks generated by the terminal device under test and collected by sensors.
[0127] The sending module 703 can be used to send a response signal to the background server, so that the background server compares the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determines whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the comparison result.
[0128] In an embodiment of the present application, the background server can generate more than three challenge tasks, and the terminal device under test can execute more than three challenge tasks. The three or more challenge tasks include the same challenge tasks, i.e., first-category tasks, and challenge tasks different from the first-category tasks, i.e., second-category tasks. The terminal device under test can send a response signal generated by the terminal device under test executing the challenge task collected by the sensor to the background server, and the background server determines whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the response signal. The physical unclonable function can enable a real physical terminal device to produce a unique unclonable output to a challenge task, and the response signal can reflect the characteristics of the physical unclonable function. The characteristics of the physical unclonable function reflected in the response signals generated by the real physical terminal device when performing the same challenge task and different challenge tasks have certain regularities, while the characteristics of the physical unclonable function reflected in the response signals generated by the virtual terminal device when performing the same challenge task and different challenge tasks are difficult to have regularities or the regularities are different from those of the real physical terminal device. Moreover, a third party simulating a virtual terminal device cannot know the content of the challenge task and the time when the virtual terminal device performs the challenge task, nor can it simulate the characteristics of the physical unclonable function reflected by the response signals generated by the real physical terminal device when performing the same challenge task and different challenge tasks. Therefore, it is possible to accurately determine whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the response signal, thereby achieving the distinction between real physical terminal devices and virtual terminal devices, and also improving the anti-attack ability of the terminal device authenticity detection method.
[0129] In some examples, the response signal includes non-correlation information, which is used to express characteristics of a physical unclonable function. If the difference between the non-correlation information corresponding to the first type of task is within a preset error range, and the difference between the non-correlation information corresponding to the second type of task and the non-correlation information corresponding to the first type of task is outside the preset error range, the terminal device under test is a real physical terminal device. If the difference between the non-correlation information corresponding to the first type of task is outside the preset error range, and / or the difference between the non-correlation information corresponding to the second type of task and the non-correlation information corresponding to the first type of task is within the preset error range, the terminal device under test is a virtual terminal device.
[0130] In some examples, the response signal is separated by the backend server into correlation information and non-correlation information. The correlation information is calculated by the backend server based on common characteristic factors of the sensors, and the non-correlation information is used to express the characteristics of the physical unclonable function. The backend server compares the non-correlation information corresponding to the first type of task and the non-correlation information corresponding to the second type of task to obtain a comparison result.
[0131] In some examples, the response signal separated into the correlation information and the non-correlation information is the response signal after general denoising processing is performed by the background server.
[0132] In some examples, when multiple terminal devices under test are determined to be virtual terminal devices, if the differences between the characteristics of the physical unclonable functions of the multiple terminal devices under test are within a preset characteristic error range, the multiple terminal devices under test are simulated based on the same cloud platform, and the characteristics of the physical unclonable function are obtained by the background server based on the response signals corresponding to more than three challenge tasks performed by the multiple terminal devices under test.
[0133] The sixth aspect of the present application provides a terminal device authenticity detection device, which corresponds to the terminal device authenticity detection method provided in the third aspect of the present application and can be applied to the background server of the target detection application. Figure 11 is a schematic diagram of the structure of the terminal device authenticity detection device provided in an embodiment of the sixth aspect of the present application. As shown in Figure 11, the terminal device authenticity detection device 800 may include a challenge task generation module 801, a sending module 802, a receiving module 803 and a data processing module 804.
[0134] The challenge task generation module 801 can be used to generate three or more challenge tasks, which include first-category tasks and second-category tasks. The first-category tasks include at least two identical challenge tasks, and the second-category tasks include challenge tasks different from the first-category tasks.
[0135] The sending module 802 may be configured to send three or more challenge tasks to the terminal device under test. The terminal device under test has a sensor and an object detection application.
[0136] The receiving module 803 may be configured to receive a response signal sent by the terminal device under test, where the response signal is collected by the sensor when the target detection application triggers the terminal device under test to perform three or more challenge tasks.
[0137] The data processing module 804 may be configured to compare the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determine whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison result.
[0138] In an embodiment of the present application, the background server can generate more than three challenge tasks, and the terminal device under test can execute more than three challenge tasks. The three or more challenge tasks include the same challenge tasks, i.e., first-category tasks, and challenge tasks different from the first-category tasks, i.e., second-category tasks. The terminal device under test can send a response signal generated by the terminal device under test executing the challenge task collected by the sensor to the background server, and the background server determines whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the response signal. The physical unclonable function can enable the real physical terminal device to produce a unique unclonable output for the challenge task. The response signal can reflect the characteristics of the physical unclonable function. The characteristics of the physical unclonable function reflected in the response signals generated by the real physical terminal device when performing the same challenge task and different challenge tasks have certain regularities, while the characteristics of the physical unclonable function reflected in the response signals generated by the virtual terminal device when performing the same challenge task and different challenge tasks are difficult to have regularities or the regularities are different from those of the real physical terminal device. Moreover, a third party simulating the virtual terminal device cannot know the content of the challenge task and the time when the virtual terminal device performs the challenge task, nor can it simulate the characteristics of the physical unclonable function reflected by the response signals generated by the real physical terminal device when performing the same challenge task and different challenge tasks. Therefore, it is possible to accurately determine whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the response signal, thereby realizing the distinction between real physical terminal devices and virtual terminal devices, and also improving the anti-attack ability of the terminal device authenticity detection method.
[0139] In some examples, the response signal includes non-correlation information, which is used to express characteristics of a physical unclonable function. If the difference between the non-correlation information corresponding to the first type of task is within a preset error range, and the difference between the non-correlation information corresponding to the second type of task and the non-correlation information corresponding to the first type of task is outside the preset error range, the terminal device under test is a real physical terminal device. If the difference between the non-correlation information corresponding to the first type of task is outside the preset error range, and / or the difference between the non-correlation information corresponding to the second type of task and the non-correlation information corresponding to the first type of task is within the preset error range, the terminal device under test is a virtual terminal device.
[0140] In some examples, the data processing module 804 can be specifically used to: obtain common characteristic factors that affect the sensor; based on the common characteristic factors, separate the response signal to obtain correlation information and non-correlation information, the correlation information is calculated based on the common characteristic factors, and the non-correlation information is used to express the characteristics of the physical unclonable function; compare the non-correlation information corresponding to the first type of task, and compare the non-correlation information corresponding to the first type of task with the non-correlation information corresponding to the second type of task to obtain a comparison result; based on the comparison result, determine whether the terminal device under test is a real physical terminal device or a virtual terminal device.
[0141] In some examples, the data processing module 804 may also be configured to perform universal denoising on the response signal to obtain a universal denoising-processed response signal before separating the response signal to obtain correlation information and non-correlation information based on common characteristic factors.
[0142] In some embodiments, the data processing module 804 can also be used to: when it is determined that multiple terminal devices under test are virtual terminal devices, obtain the characteristics of the physical unclonable functions of the multiple terminal devices under test based on the response signals corresponding to more than three challenge tasks performed by each terminal device under test; if the difference between the characteristics of the physical unclonable functions of the multiple terminal devices under test is within a preset characteristic error range, determine that the multiple terminal devices under test are simulated based on the same cloud platform.
[0143] A seventh aspect of the present application further provides a terminal device. Figure 12 is a schematic diagram of the structure of a terminal device provided in an embodiment of the seventh aspect of the present application. As shown in Figure 12, the terminal device 900 includes a memory 901, a processor 902, and a computer program stored in the memory 901 and executable on the processor 902.
[0144] In some examples, the processor 902 may include a central processing unit (CPU), or an application-specific integrated circuit (ASIC), or may be configured to implement one or more integrated circuits of the embodiments of the present application.
[0145] The memory 901 may include a read-only memory (ROM), a random access memory (RAM), a magnetic disk storage medium device, an optical storage medium device, a flash memory device, an electrical, optical or other physical / tangible memory storage device. Therefore, typically, the memory includes one or more tangible (non-transitory) computer-readable storage media (e.g., a memory device) encoded with software including computer-executable instructions, and when the software is executed (e.g., by one or more processors), it is operable to perform the operations described with reference to the method for detecting the authenticity of a terminal device in the embodiment of the first aspect of the present application.
[0146] The processor 902 runs a computer program corresponding to the executable program code by reading the executable program code stored in the memory 901, so as to implement the method for detecting the authenticity of the terminal device in the embodiment of the first aspect.
[0147] In some examples, the terminal device 900 may further include a communication interface 903 and a bus 904. As shown in FIG12 , the memory 901, the processor 902, and the communication interface 903 are connected via the bus 904 and communicate with each other.
[0148] The communication interface 903 is mainly used to implement communication between the modules, devices, units and / or equipment in the embodiment of the present application. Input devices and / or output devices can also be connected through the communication interface 903.
[0149] The bus 904 includes hardware, software, or both, and couples the components of the terminal device 900 to each other. By way of example, and not limitation, the bus 904 may include an Accelerated Graphics Port (AGP) or other graphics bus, an Enhanced Industry Standard Architecture (EISA) bus, a Front Side Bus (FSB), a HyperTransport (HT) interconnect, an Industry Standard Architecture (ISA) bus, an InfiniBand interconnect, a Low Pin Count (LPC) bus, a memory bus, a Micro Channel Architecture (MCA) bus, a Peripheral Component Interconnect (PCI) bus, a PCI-Express (PCI-E) bus, a Serial Advanced Technology Attachment (SATA) bus, a Video Electronics Standards Association Local Bus (VLB) bus, or other suitable buses, or a combination of two or more of these. Where appropriate, the bus 904 may include one or more buses. Although embodiments herein describe and illustrate a particular bus, this application contemplates any suitable bus or interconnect.
[0150] The eighth aspect of the present application also provides a terminal device, which includes a memory, a processor, and a computer program stored in the memory and executable on the processor. The memory includes one or more tangible (non-transitory) computer-readable storage media (e.g., a memory device) encoded with software including computer-executable instructions, and when the software is executed (e.g., by one or more processors), it is operable to perform the operations described with reference to the method for detecting the authenticity of the terminal device in the embodiment of the second aspect of the present application. The processor runs the computer program corresponding to the executable program code by reading the executable program code stored in the memory, so as to implement the method for detecting the authenticity of the terminal device in the above-mentioned second aspect embodiment.
[0151] In some examples, the terminal device may further include a communication interface and a bus. The memory, processor, and communication interface are connected via the bus and communicate with each other.
[0152] The connection and entity selection of the memory, processor, communication interface, and bus in the terminal device of the eighth aspect of this application can be found in the relevant description of the terminal device of the seventh aspect, and will not be repeated here.
[0153] The ninth aspect of the present application further provides a server comprising a memory, a processor, and a computer program stored in the memory and executable on the processor. The memory comprises one or more tangible (non-transitory) computer-readable storage media (e.g., a memory device) encoded with software comprising computer-executable instructions, and when the software is executed (e.g., by one or more processors), it is operable to perform the operations described with reference to the method for detecting the authenticity of the terminal device in the embodiment of the third aspect of the present application. The processor runs the computer program corresponding to the executable program code by reading the executable program code stored in the memory, so as to implement the method for detecting the authenticity of the terminal device in the above-mentioned third aspect embodiment.
[0154] In some examples, the server may further include a communication interface and a bus. The memory, processor, and communication interface are connected via the bus and communicate with each other.
[0155] The connection and entity selection of the memory, processor, communication interface, and bus in the server of the ninth aspect of this application can be found in the relevant description of the terminal device of the seventh aspect, and will not be repeated here.
[0156] The tenth aspect of the present application provides a terminal device authenticity detection system. Figure 13 is a schematic diagram of the structure of the terminal device authenticity detection system provided in an embodiment of the tenth aspect of the present application. As shown in Figure 13, the terminal device authenticity detection system includes the terminal device 1001 in the embodiment of the eighth aspect and the server 1002 in the embodiment of the ninth aspect. The specific contents of the terminal device 1001 and the server 1002 can be found in the relevant descriptions in the above embodiments, and can achieve the same technical effects. To avoid repetition, they will not be repeated here.
[0157] In the eleventh aspect of the present application, a computer-readable storage medium is provided, on which computer program instructions are stored. When the computer program instructions are executed by a processor, the terminal device authenticity detection method in the first aspect embodiment, the terminal device authenticity detection method in the second aspect embodiment, or the terminal device authenticity detection method in the third aspect embodiment can be implemented, and the same technical effect can be achieved. To avoid repetition, they are not described here. The above-mentioned computer-readable storage medium may include a non-transitory computer-readable storage medium, such as a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, etc., which is not limited here.
[0158] An embodiment of the present application also provides a computer program product. When the instructions in the computer program product are executed by the processor of an electronic device, the electronic device can execute the terminal device authenticity detection method in the above-mentioned first aspect embodiment, the terminal device authenticity detection method in the second aspect embodiment, or the terminal device authenticity detection method in the third aspect embodiment, and can achieve the same technical effect. To avoid repetition, it will not be repeated here.
[0159] It should be clear that the various embodiments in this specification are described in a progressive manner, and the same or similar parts between the various embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. For device embodiments, terminal device embodiments, server embodiments, system embodiments, computer-readable storage medium embodiments, and computer program product embodiments, the relevant parts can refer to the description part of the method embodiments, and the method embodiments can also refer to each other. This application is not limited to the specific steps and structures described above and shown in the figures. Those skilled in the art can make various changes, modifications and additions, or change the order between the steps after understanding the spirit of this application. In addition, for the sake of brevity, a detailed description of known method technologies is omitted here.
[0160] Aspects of the present application have been described above with reference to the flowcharts and / or block diagrams of the methods, devices (systems) and computer program products according to the embodiments of the present application. It should be understood that each box in the flowchart and / or block diagram and the combination of each box in the flowchart and / or block diagram can be implemented by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer or other programmable data processing device to produce a machine so that these instructions executed via the processor of the computer or other programmable data processing device enable the implementation of the function / action specified in one or more boxes of the flowchart and / or block diagram. This processor can be, but is not limited to, a general-purpose processor, a special-purpose processor, a special application processor or a field programmable logic circuit. It is also understood that each box in the block diagram and / or the flowchart and the combination of the boxes in the block diagram and / or the flowchart can also be implemented by the dedicated hardware that performs the specified function or action, or can be implemented by the combination of dedicated hardware and computer instructions.
[0161] Those skilled in the art should understand that the above embodiments are illustrative rather than restrictive. Different technical features appearing in different embodiments can be combined to achieve beneficial effects. Based on a study of the drawings, the specification and the claims, those skilled in the art should be able to understand and implement other variations of the disclosed embodiments. In the claims, the term "comprising" does not exclude other devices or steps; the quantifier "one" does not exclude a plurality; the terms "first" and "second" are used to identify names rather than to indicate any specific order. Any figure marks in the claims should not be understood as limiting the scope of protection. The functions of multiple parts appearing in the claims can be implemented by a separate hardware or software module. The fact that certain technical features appear in different dependent claims does not mean that these technical features cannot be combined to achieve beneficial effects.
Claims
1. A method for detecting the authenticity of a terminal device, applied to a terminal device under test, wherein the terminal device under test has a sensor and a target detection application, and the method comprises: Generate more than three challenge tasks through the target detection application, wherein the more than three challenge tasks include a first category of tasks and a second category of tasks, the first category of tasks includes at least two identical challenge tasks, and the second category of tasks includes challenge tasks different from the first category of tasks; Triggering the terminal device under test to execute the three or more challenge tasks through the target detection application, and acquiring a response signal corresponding to the challenge task generated by the terminal device under test and collected by the sensor; The target detection application compares the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determines whether the terminal device under test is a real physical terminal device or a virtual terminal device based on the comparison result.
2. The method according to claim 1, wherein: The response signal includes non-correlation information, where the non-correlation information is used to express characteristics of a physical unclonable function; When the difference between the non-correlation information corresponding to the first type of task is within a preset error range, and the difference between the non-correlation information corresponding to the second type of task and the non-correlation information corresponding to the first type of task is outside the preset error range, the terminal device under test is a real physical terminal device; When the difference between the non-correlation information corresponding to the first type of task is outside the preset error range, and / or the difference between the non-correlation information corresponding to the second type of task and the non-correlation information corresponding to the first type of task is within the preset error range, the terminal device under test is a virtual terminal device.
3. The method according to claim 1, wherein: The comparing, by the target detection application, the response signal corresponding to the first type of task and the response signal corresponding to the second type of task, and determining, according to the comparison result, whether the terminal device under test is a real physical terminal device or a virtual terminal device, includes: Acquire common characteristic factors affecting the sensor; Separate the response signal to obtain correlation information and non-correlation information based on the common characteristic factors The correlation information is calculated based on the common characteristic factors, and the non-correlation information is used to express the characteristics of the physical unclonable function; Comparing the non-correlation information corresponding to the first type of tasks, and comparing the non-correlation information corresponding to the first type of tasks with the non-correlation information corresponding to the second type of tasks, to obtain a comparison result; According to the comparison result, it is determined that the terminal device under test is a real physical terminal device or a virtual terminal device.
4. The method according to claim 3, before separating the response signal to obtain correlation information and non-correlation information according to the common characteristic factors, further comprising: Performing general denoising processing on the response signal to obtain the response signal after general denoising processing.
5. The method according to claim 1, further comprising: In the case where it is determined that the plurality of the tested terminal devices are virtual terminal devices, obtaining, by the target detection application, characteristics of the physical unclonable functions of the plurality of the tested terminal devices according to the response signals corresponding to the three or more challenge tasks executed by each of the tested terminal devices; If the differences between the characteristics of the physical unclonable functions of the multiple terminal devices under test are within a preset characteristic error range, it is determined that the multiple terminal devices under test are simulated based on the same cloud platform.
6. A method for detecting the authenticity of a terminal device, applied to a terminal device under test, wherein the terminal device under test has a sensor and a target detection application, the method comprising: Receiving three or more challenge tasks generated and sent by the background server of the target detection application, wherein the three or more challenge tasks include a first category of tasks and a second category of tasks, wherein the first category of tasks includes at least two identical challenge tasks, and the second category of tasks includes challenge tasks different from the first category of tasks; Triggering the terminal device under test to execute the three or more challenge tasks through the target detection application, and acquiring a response signal corresponding to the challenge task generated by the terminal device under test and collected by the sensor; Send the response signal to the backend server so that the backend server The response signal corresponding to the first type of task is compared with the response signal corresponding to the second type of task, and it is determined according to the comparison result that the terminal device under test is a real physical terminal device or a virtual terminal device.
7. The method according to claim 6, wherein: The response signal includes non-correlation information, where the non-correlation information is used to express the characteristics of a physical unclonable function. When the difference between the non-correlation information corresponding to the first type of task is within a preset error range, and the difference between the non-correlation information corresponding to the second type of task and the non-correlation information corresponding to the first type of task is outside the preset error range, the terminal device under test is a real physical terminal device; When the difference between the non-correlation information corresponding to the first type of task is outside the preset error range, and / or the difference between the non-correlation information corresponding to the second type of task and the non-correlation information corresponding to the first type of task is within the preset error range, the terminal device under test is a virtual terminal device.
8. The method according to claim 6, wherein: The response signal is separated by the background server into correlation information and non-correlation information, wherein the correlation information is calculated by the background server according to the common characteristic factors of the sensors, and the non-correlation information is used to express the characteristics of a physical unclonable function; The comparison result is obtained by the background server comparing the non-correlation information corresponding to the first type of tasks, and comparing the non-correlation information corresponding to the first type of tasks with the non-correlation information corresponding to the second type of tasks.
9. The method according to claim 8, wherein: The response signal separated into the correlation information and the non-correlation information is the response signal after general denoising processing is performed by the background server.
10. The method according to claim 6, wherein: When it is determined that multiple terminal devices under test are virtual terminal devices, if the differences between the characteristics of the physical unclonable functions of the multiple terminal devices under test are within a preset characteristic error range, the multiple terminal devices under test are simulated based on the same cloud platform, and the characteristics of the physical unclonable function are obtained by the background server based on the response signals corresponding to the more than three challenge tasks performed by the multiple terminal devices under test.
11. A method for detecting the authenticity of a terminal device, applied to a background server of a target detection application, wherein the terminal device under test has a sensor and the target detection application, and the method comprises: Generate and send three or more challenge tasks to the tested terminal device, wherein the three or more challenge tasks include a first category of tasks and a second category of tasks, wherein the first category of tasks includes at least two identical challenge tasks, and the second category of tasks includes challenge tasks different from the first category of tasks; Receiving a response signal sent by the terminal device under test, where the response signal is collected by the sensor when the target detection application triggers the terminal device under test to perform the three or more challenge tasks; Based on a comparison between the response signal corresponding to the first type of task and the response signal corresponding to the second type of task, it is determined according to the comparison result that the terminal device under test is a real physical terminal device or a virtual terminal device.
12. The method according to claim 11, wherein: The response signal includes non-correlation information, where the non-correlation information is used to express characteristics of a physical unclonable function; When the difference between the non-correlation information corresponding to the first type of task is within a preset error range, and the difference between the non-correlation information corresponding to the second type of task and the non-correlation information corresponding to the first type of task is outside the preset error range, the terminal device under test is a real physical terminal device; When the difference between the non-correlation information corresponding to the first type of task is outside the preset error range, and / or the difference between the non-correlation information corresponding to the second type of task and the non-correlation information corresponding to the first type of task is within the preset error range, the terminal device under test is a virtual terminal device.
13. The method according to claim 11, wherein: The comparing the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determining whether the tested terminal device is a real physical terminal device or a virtual terminal device according to the comparison result, includes: Acquire common characteristic factors affecting the sensor; According to the common characteristic factors, the response signals are separated to obtain correlation information and non-correlation information, wherein the correlation information is calculated based on the common characteristic factors and the non-correlation information is obtained. The information is used to express the characteristics of physically unclonable functions; Comparing the non-correlation information corresponding to the first type of tasks, and comparing the non-correlation information corresponding to the first type of tasks with the non-correlation information corresponding to the second type of tasks, to obtain a comparison result; According to the comparison result, it is determined that the terminal device under test is a real physical terminal device or a virtual terminal device.
14. The method according to claim 13, before separating the response signal to obtain correlation information and non-correlation information according to the common characteristic factors, further comprising: Performing general denoising processing on the response signal to obtain the response signal after general denoising processing.
15. The method according to claim 11, further comprising: In the case where it is determined that the plurality of the tested terminal devices are virtual terminal devices, obtaining characteristics of the physical unclonable functions of the plurality of the tested terminal devices according to the response signals corresponding to the three or more challenge tasks executed by each of the tested terminal devices; If the differences between the characteristics of the physical unclonable functions of the multiple terminal devices under test are within a preset characteristic error range, it is determined that the multiple terminal devices under test are simulated based on the same cloud platform.
16. A terminal device authenticity detection device, applied to a terminal device under test, wherein the terminal device under test has a sensor and a target detection application, and the detection device comprises: A challenge task generation module, used to generate three or more challenge tasks, wherein the three or more challenge tasks include a first category of tasks and a second category of tasks, wherein the first category of tasks includes at least two identical challenge tasks, and the second category of tasks includes challenge tasks different from the first category of tasks; An information collection module, used to trigger the terminal device under test to execute the three or more challenge tasks, and obtain a response signal corresponding to the challenge task generated by the terminal device under test and collected by the sensor; The data processing module is used to compare the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determine whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison result.
17. A terminal device authenticity detection device, applied to a terminal device under test, wherein the terminal device under test has a sensor and a target detection application, and the detection device comprises: A receiving module, configured to receive three or more challenge tasks generated and sent by a background server of the target detection application, wherein the three or more challenge tasks include a first category of tasks and a second category of tasks, wherein the first category of tasks includes at least two identical challenge tasks, and the second category of tasks includes challenge tasks different from the first category of tasks; An information collection module, used to trigger the terminal device under test to execute the three or more challenge tasks, and obtain a response signal corresponding to the challenge task generated by the terminal device under test and collected by the sensor; A sending module is used to send the response signal to the background server, so that the background server compares the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determines whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison result.
18. A terminal device authenticity detection device, applied to a background server of a target detection application, wherein the terminal device under test has a sensor and the target detection application, and the detection device comprises: A challenge task generation module, used to generate three or more challenge tasks, wherein the three or more challenge tasks include a first category of tasks and a second category of tasks, wherein the first category of tasks includes at least two identical challenge tasks, and the second category of tasks includes challenge tasks different from the first category of tasks; A sending module, used for sending the three or more challenge tasks to the terminal device under test; A receiving module, configured to receive a response signal sent by the terminal device under test, wherein the response signal is collected by the sensor when the target detection application triggers the terminal device under test to perform the three or more challenge tasks; The data processing module is used to compare the response signal corresponding to the first type of task with the response signal corresponding to the second type of task, and determine whether the terminal device under test is a real physical terminal device or a virtual terminal device according to the comparison result.
19. A terminal device, comprising: a processor and a memory storing computer program instructions; When the processor executes the computer program instructions, the method for detecting the authenticity of the terminal device as described in any one of claims 1 to 5 is implemented.
20. A terminal device, comprising: a processor and a memory storing computer program instructions; When the processor executes the computer program instructions, the method for detecting the authenticity of the terminal device as described in any one of claims 6 to 10 is implemented.
21. A server, comprising: a processor and a memory storing computer program instructions; When the processor executes the computer program instructions, the method for detecting the authenticity of the terminal device as described in any one of claims 11 to 15 is implemented.
22. A terminal device authenticity detection system, comprising the terminal device as claimed in claim 20 and the server as claimed in claim 21.
23. A computer-readable storage medium having computer program instructions stored thereon, wherein the computer program instructions, when executed by a processor, implement the method for detecting the authenticity of a terminal device as claimed in any one of claims 1 to 15.
Citation Information
Patent Citations
Use of puf for checking authentication, in particular for protecting against unauthorized access to function of ic or control device
CN104782076A
Physical layer authentication method and system, equipment and computer readable storage medium
CN114039732A
Terminal equipment authenticity detection method, device, equipment, system and medium
CN117034243A
Polymer filaments comprising a gas-forming compound and additive manufacturing therewith
KR1020220027768A
Device authentication based on inconsistent responses
US11211140B1