Method for determining authenticity of terminal, processing device, and terminal

Abstract

The present application relates to the technical field of authentication, and more specifically to a method for determining the authenticity of a terminal, a system for determining the authenticity of a terminal, a terminal comprising the system, and a computer-readable storage medium and computer program product implementing the method. The method comprises the following steps: sending a randomly generated challenge task number to a sound production unit of a terminal, so that the sound production unit generates a sound signal corresponding to the challenge task number; receiving a pickup signal collected by a pickup unit of the terminal; performing consistency analysis on the signal characteristics of the sound signal and the pickup signal; and determining the authenticity of the terminal on the basis of a consistency analysis result.

Description

Method for determining authenticity of terminal, processing device and terminal

[0001] This application claims priority to Chinese Patent Application No. 202411010735.2, filed on July 25, 2024, and entitled “Method for determining authenticity of terminal, processing device and terminal,” the entire disclosure of which is incorporated herein by reference. TECHNICAL FIELD

[0002] The present application relates to the field of authentication technology, and more particularly to a method for determining authenticity of a terminal, a processing device, a terminal comprising the processing device, a computer readable storage medium and a computer program product embodying the method. BACKGROUND

[0003] The latest generation of cloud phones have unlimitedly approached the performance of real devices in terms of functions and performance, and can provide monitoring and migration capabilities based on cloud technology, and have excellent stability performance. In addition to this, virtual device platforms such as cloud phones and open source projects provide rich parameters, and even sensor data parameter interfaces, which can be configured and injected with data at will by users.

[0004] The flexible expansion characteristics of cloud phones bring challenges to traditional device fingerprinting methods. First, the software environment can be made exactly the same as a real phone, and the feature algorithm is difficult to identify. Second, the convenient hardware interface parameter injection and modification can easily make the detection algorithm be evaded. Currently, the payment industry is facing the business difficulty that it is difficult to detect and identify the situation of scalpers using cloud phones to fleece, which seriously affects the normal development of marketing activities such as business acquisition.

[0005] It should be noted that the information disclosed in the above BACKGROUND section is only used to strengthen the understanding of the background of the present application, and therefore can include information that does not constitute prior art known to those of ordinary skill in the art. SUMMARY

[0006] To solve or at least alleviate one or more of the above problems, embodiments of the present application provide a method for determining authenticity of a terminal, a processing device, a terminal comprising the processing device, a computer readable storage medium and a computer program product embodying the method, which can use the sound emitting unit and the sound pickup unit of the terminal to identify the authenticity of the terminal, so as to determine whether the terminal is a fake terminal or a virtual terminal.

[0007] According to a first aspect of the present application, a method for determining authenticity of a terminal is provided, the method comprising the following steps: sending a randomly generated challenge task number to a sound generating unit of the terminal, so that the sound generating unit generates a sound signal corresponding to the challenge task number; receiving a sound pickup signal collected by a sound pickup unit of the terminal; performing consistency analysis on signal features of the sound signal and the sound pickup signal; and determining authenticity of the terminal based on the consistency analysis result.

[0008] Alternatively or additionally to the above solutions, the method for determining authenticity of a terminal according to an embodiment of the present application further comprises: in response to receiving a start response returned by the sound generating unit, sending a sound pickup instruction to the sound pickup unit, wherein the start response is used to indicate that the sound generating unit has started to generate the sound signal.

[0009] Alternatively or additionally to the above solutions, the method for determining authenticity of a terminal according to an embodiment of the present application further comprises: reducing the delay between the generation of the sound signal and the collection of the sound pickup signal by using a thread synchronization mechanism.

[0010] Alternatively or additionally to the above solutions, the method for determining authenticity of a terminal according to an embodiment of the present application further comprises: eliminating non-target frequencies in the sound pickup signal by using a filter; and / or performing delay compensation on the sound pickup signal according to delay characteristics of the terminal.

[0011] Alternatively or additionally to the above solutions, in the method for determining authenticity of a terminal according to an embodiment of the present application, the challenge task number is generated and encrypted by a trusted execution environment or a background of the terminal.

[0012] Alternatively or additionally to the above solutions, in the method for determining authenticity of a terminal according to an embodiment of the present application, the sound generating unit obtains a sound parameter corresponding to the challenge task number according to a predefined mapping rule, and the sound parameter comprises one or more of frequency, amplitude, waveform, and duration.

[0013] Alternatively or additionally to the above solutions, in the method for determining authenticity of a terminal according to an embodiment of the present application, the sound signal is an audio signal with fixed duration and frequency greater than 18 kHz.

[0014] As an alternative or supplement to the above solutions, in the method for determining authenticity of a terminal according to an embodiment of the present application, the consistency analysis on the signal features of the sound signal and the sound pickup signal comprises: obtaining the frequency spectrum of the sound signal and the sound pickup signal by using Fourier transform; extracting signal features from the frequency spectrum of the sound signal and the sound pickup signal, the signal features comprising one or more of frequency, amplitude, spectral shape, and phase; calculating the matching degree of the signal features of the sound signal and the sound pickup signal; and determining a consistency score based on the matching degree of each signal feature.

[0015] As an alternative or supplement to the above solutions, in the method for determining authenticity of a terminal according to an embodiment of the present application, determining the authenticity of the terminal based on the consistency analysis result comprises: if the consistency score is greater than or equal to a preset threshold, determining that the terminal is a real terminal; and if the consistency score is less than the preset threshold, determining that the terminal is a virtual terminal or a false terminal.

[0016] As an alternative or supplement to the above solutions, the method for determining authenticity of a terminal according to an embodiment of the present application further comprises: in the case where it is determined that the terminal is a real terminal, opening the service permission of the terminal.

[0017] According to a second aspect of the present application, a processing apparatus is provided, comprising: a memory; a processor; and a computer program stored on the memory and executable on the processor, running of the computer program causing the following operations: sending a randomly generated challenge task number to a sound generating unit of the terminal, for the sound generating unit to generate a sound signal corresponding to the challenge task number; receiving a sound pickup signal collected by a sound pickup unit of the terminal; performing consistency analysis on signal features of the sound signal and the sound pickup signal; and determining the authenticity of the terminal based on the consistency analysis result.

[0018] According to a third aspect of the present application, a terminal is provided, comprising any one of the processing apparatuses according to the second aspect of the present application; a sound generating unit configured to generate a sound signal corresponding to a challenge task number; and a sound pickup unit configured to collect a sound pickup signal.

[0019] According to a fourth aspect of the present application, a computer readable storage medium is provided, comprising instructions which, when executed, perform any one of the methods for determining authenticity of a terminal according to the first aspect of the present application.

[0020] According to a fifth aspect of the present application, a computer program product is provided, comprising a computer program which, when executed by a processor, implements any one of the methods for determining authenticity of a terminal according to the first aspect of the present application.

[0021] The scheme for determining authenticity of a terminal according to one or more embodiments of the present application determines the authenticity of the terminal by consistency analysis on the signal features of the sound signal emitted by the sound-emitting unit and the sound-pickup signal collected by the sound-pickup unit. First, since the challenge task number has randomness and is invisible to the attacker, the attacker cannot easily determine when the challenge is initiated, and cannot confirm the challenge content that is actually performed, so the scheme has strong anti-attack performance. Second, compared with the scheme for identifying the authenticity of the terminal by using a magnetic sensor and / or a light sensor, the sound sensor has high sensitivity and good recognition stability, and the algorithm complexity and depth of the consistency analysis of the sound signal are low, saving system computing power. BRIEF DESCRIPTION OF DRAWINGS

[0022] The above and / or other aspects and advantages of the present application will become more apparent and more readily appreciated by referring to the following detailed description in conjunction with the accompanying drawings, in which like reference notations are used to designate and identify similar, equivalent or identical elements. In the drawings:

[0023] FIG. 1 is a schematic flowchart of a method 10 for determining authenticity of a terminal according to one or more embodiments of the present application;

[0024] FIG. 2 is a schematic flowchart of a method for determining authenticity of a terminal according to one or more embodiments of the present application;

[0025] FIG. 3 is a schematic block diagram of a processing device 30 according to one or more embodiments of the present application; and

[0026] FIG. 4 is a schematic block diagram of a terminal 40 according to one or more embodiments of the present application. DETAILED DESCRIPTION

[0027] The following detailed description is merely exemplary in nature and is not intended to limit the disclosed technology or the application and uses of the disclosed technology. Furthermore, there is no intention to be bound by any expressed or implied theory presented in the preceding technical field, background or the following detailed description.

[0028] In the following detailed description of embodiments, numerous specific details are set forth in order to provide a more thorough understanding of the disclosed technology. However, it will be apparent to one of ordinary skill in the art having the benefit of this disclosure that the disclosed technology can be practiced without these specific details. In other instances, well-known features have not been described in detail to avoid unnecessarily complicating the description.

[0029] The terms such as "comprising" and "including" represent that the technical solutions of the present application do not exclude other units and steps not directly or explicitly described in the specification. The terms such as "first" and "second" do not represent the order of units in time, space, size, etc., but only distinguish the units.

[0030] With the popularity of cloud technology, there are a large number of scenarios that need to identify the authenticity of terminals, that is, to distinguish between real terminals and virtual or false terminals. For example, in situations that require high security, such as bank transactions, online payments, identity verification, business lead generation using user terminals, identifying the authenticity of terminals can prevent fraudulent behavior through simulated terminals; in online games, distinguishing between real players and cheaters using emulators or cloud phones can maintain the fairness of the game and the player experience; social media platforms need to identify real users and fake accounts using automated tools to prevent spam, the spread of false information, and the manipulation of social networks; in Internet of Things (IoT) device management, distinguishing between real terminals and simulated terminals helps to prevent unauthorized access and data leakage; when implementing remote work policies, enterprises need to ensure that employees are using real mobile devices to ensure data security and access control.

[0031] The real terminal in the present application refers to a smart device with a physical form that a user can directly touch and operate. The real terminal can independently complete specific functions such as audio input, audio output, storage, display, communication, etc. In particular, the real terminal in the present application has a physical sound emitting unit (e.g., a loudspeaker) capable of emitting sound signals and a physical sound collecting unit (e.g., a sound sensor such as a microphone) capable of collecting sound signals. Exemplarily, the real terminal includes but is not limited to a smartphone, a tablet computer, a notebook computer, a desktop computer, a vehicle infotainment system, an augmented reality (AR) or virtual reality (VR) device, etc.

[0032] The virtual terminal in the present application refers to a device without a physical form, usually implemented through software simulation, for example, a cloud device running on a cloud server. The false terminal in the present application refers to a device with a certain physical form but without a hardware basis that a user can directly touch and operate, for example, a box-type centralized control mobile phone. In particular, the virtual terminal and the false terminal in the present application do not have a physical sound emitting unit and a physical sound collecting unit.

[0033] In order to distinguish real terminals from virtual terminals and false terminals, one possible solution is to identify the authenticity of the terminal through terminal inherent parameters (e.g., system attributes, file system features, and terminal behavior features (e.g., gyroscope, positioning, battery power, etc.)). However, terminal inherent parameters are extremely vulnerable to simulation and attack. For example, the software environment of a current cloud phone can be exactly the same as that of a real phone, and the feature algorithm is difficult to identify. In addition, the cloud phone can provide convenient hardware interface parameter injection and modification, thus easily evading detection algorithms. Furthermore, the combination of multiple parameters only increases the difficulty of judgment logic, and does not affect the depth and complexity of the algorithm. In view of this, the present application proposes to determine the authenticity of the terminal by analyzing the consistency of the signal features of the sound signal emitted by the sound emitting unit of the terminal and the sound pickup signal collected by the sound pickup unit, thereby saving system computing power while improving the anti-attack performance of the scheme. In the following, each example embodiment according to the present disclosure will be described in detail with reference to the accompanying drawings.

[0034] Referring to the accompanying drawings, FIG. 1 is a schematic flowchart of a method 10 for determining the authenticity of a terminal according to one or more embodiments of the present application.

[0035] It should be noted that the execution subject of the method 10 can be the terminal itself, such as a smartphone, a tablet computer, a notebook computer, a desktop computer, a vehicle infotainment system, an AR or VR device, etc. In one possible embodiment, the terminal loads an application program with authenticity identification function to the user end, and opens the service permission of the terminal in the case of determining that the terminal is a real terminal.

[0036] As shown in FIG. 1, in step S110, a randomly generated challenge task number is sent to the sound emitting unit of the terminal, so that the sound emitting unit generates a sound signal corresponding to the challenge task number.

[0037] The challenge task number is a unique identifier for verifying or triggering a specific operation (e.g., identifying the authenticity of the terminal), and its randomness increases the security of the system, because a different number is randomly generated each time the verification or operation is performed, which is difficult to predict or copy. Optionally, the challenge task number is generated and encrypted by the trusted execution environment (TEE) or the background of the terminal. The TEE is a combination of hardware and software security environment, which can protect sensitive data and code from potential attacks by the operating system or application program. If the system has a TEE, the challenge task number can be generated in this secure environment, further ensuring its confidentiality and integrity. If the system does not have a TEE, the challenge task number can be generated on the background and sent to the sound emitting unit through an encrypted channel to prevent interception or tampering during transmission.

[0038] The sounding unit is a physical device capable of realizing audio output, which can be a loudspeaker, a buzzer or other devices capable of generating sound. The sound signal emitted by the sounding unit is preferably a high-frequency signal to distinguish from general user scene noise. For example, the sound signal should exceed 18 kHz, making it difficult for the human ear to distinguish, avoiding disturbing the user. Alternatively, the sounding unit obtains the sound parameters corresponding to the challenge task number according to the predefined mapping rule after receiving the challenge task number, wherein the sound parameters include one or more of frequency, amplitude, waveform, and duration. In one possible embodiment, the frequency variation interval of the sound signal is 18 Hz to 21 Hz, and the 3 kHz frequency variation interval can be divided into 6 subintervals with a resolution of 500 Hz, each subinterval corresponding to a different character, so that a challenge task number composed of 10 characters can correspond to 6 10 different frequency sound signals. Since the challenge task number is randomly generated each time, it is difficult for an attacker to implement a data simulation attack by fabricating audio data in such a large random space.

[0039] Alternatively, the sounding unit returns a start response to the system (e.g., terminal) while starting to generate and play the sound signal, which can include the timestamp of sound playing, sound feature summary, sound parameters, etc. information, and the system sends a sound pickup instruction to the sound pickup unit immediately after receiving the start response. Alternatively, a thread synchronization mechanism (e.g., mutex, condition variable, etc.) is used to reduce the delay between the playing of the sound signal and the collection of the sound pickup signal, so as to synchronize the sound pickup operation and the sound playing as much as possible.

[0040] In step S120, the sound pickup signal collected by the sound pickup unit of the terminal is received.

[0041] Illustratively, after receiving the sound pickup instruction, the sound pickup unit immediately starts sound pickup, that is, captures the sound signal in the environment where the terminal is located, and sends the collected sound pickup signal to the processing device of the system. Alternatively, necessary processing such as amplification, noise reduction, etc. can be performed before analyzing the sound pickup signal to improve the quality of the signal and the accuracy of subsequent analysis. Illustratively, a filter (e.g., a band-pass filter) can be used to eliminate non-target frequencies (e.g., signals less than 18 Hz and greater than 21 Hz) in the sound pickup signal. Alternatively, since there can be a time delay in the transmission of the sound signal, delay compensation is needed to ensure signal synchronization. Illustratively, the sound pickup signal can be delay compensated according to the delay characteristics of the terminal or the timestamp recorded by the synchronization mechanism.

[0042] In step S130, the signal features of the sound signal and the sound pickup signal are analyzed for consistency.

[0043] Exemplarily, key features can be extracted from the sound signal and the picked-up signal respectively, such as frequency features like fundamental frequency and harmonic frequency, time-domain features like start and end time and duration of the signal, and amplitude features like maximum amplitude, average amplitude, and amplitude envelope, and the extracted features are compared to determine whether they are consistent.

[0044] In one possible embodiment, the sound signal and the picked-up signal are first subjected to Fourier transform to convert the time-domain signals into frequency-domain signals to obtain the frequency spectrum of the sound signal and the picked-up signal; one or more signal features are then extracted from the frequency spectrum of the sound signal and the picked-up signal, which can be frequency, amplitude, spectral shape, phase, etc.; the signal features of the sound signal and the picked-up signal are then compared to calculate the matching degree of the signal features of the sound signal and the picked-up signal, and a consistency score is determined based on the matching degree of the signal features. Exemplarily, in calculating the matching degree of the signal features, mean square error (MSE) or Euclidean distance can be used to quantify the difference, correlation analysis can be applied to assess the correlation between the signals, or cross-correlation can be used to determine the time delay between the signals. Exemplarily, the weighted sum of the matching degrees of the signal features can be taken as the consistency score.

[0045] In step S140, the authenticity of the terminal is determined based on the consistency analysis result.

[0046] Optionally, if the consistency score is greater than or equal to a preset threshold, the terminal is determined to be a real terminal; if the consistency score is less than the preset threshold, the terminal is determined to be a virtual terminal or a fake terminal.

[0047] Optionally, the method 10 further comprises, in the case where the terminal is determined to be a real terminal, opening the service permission of the terminal. For example, the user is allowed to use the terminal for bank transactions, online payments, identity verification, etc.

[0048] Firstly, since the challenge task number has randomness and is invisible to the attacker, the attacker cannot easily determine when the challenge is initiated, and cannot confirm the challenge content actually performed, so the method 10 has strong anti-attack capability. Secondly, compared with the scheme of using a magnetic sensor and / or a light sensor to identify the authenticity of the terminal, the sound sensor used in the method 10 has high sensitivity and good recognition stability, and the algorithm complexity and depth of the consistency analysis of the sound signal are low, saving system computing power.

[0049] In one exemplary scenario, it is assumed that the attacker starts from the sensor layer to monitor the operation of the sound emitting unit and simulates data and tampers with the data collected by the sound picking-up unit in real time. Since this process requires simulation calculation, it will produce a large time delay, so by calculating the time delay of the sound signal and the picked-up signal and comparing it with the time delay of the real terminal, the terminal can be identified.

[0050] Fig. 2 is a schematic flowchart of a method of determining authenticity of a terminal according to one or more embodiments of the present application. Referring to Fig. 2, nodes involved in the method flow include a processing device 201 (or an application program running on the terminal), a sound generating unit 202 of the terminal, and a sound pickup unit 203 of the terminal.

[0051] In step S210, the processing device 201 sends a randomly generated challenge task number to the sound generating unit 202 of the terminal.

[0052] In step S220, the sound generating unit 202 generates a sound signal corresponding to the challenge task number.

[0053] In step S230, the sound generating unit 202 returns a start response to the processing device 201, where the start response is used to indicate that the sound generating unit 202 has started to generate the sound signal.

[0054] In step S240, in response to receiving the start response, the processing device 201 sends a sound pickup instruction to the sound pickup unit 203.

[0055] In step S250, in response to receiving the sound pickup instruction, the sound pickup unit 203 starts to collect a sound pickup signal.

[0056] In step S260, the sound pickup unit 203 sends the collected sound pickup signal to the processing device 201.

[0057] In step S270, the processing device 201 pre-processes the sound pickup signal, for example, delay compensation, band-pass filtering, etc.

[0058] In step S280, the processing device 201 performs consistency analysis on signal features of the sound signal and the sound pickup signal, and determines authenticity of the terminal based on the consistency analysis result.

[0059] In step S290, the processing device 201 opens service permissions of the terminal in a case where it is determined that the terminal is a real terminal.

[0060] The specific execution manners of steps S210-S290 can refer to the description of method 10 above, which will not be repeated here.

[0061] Fig. 3 is a schematic block diagram of a processing device 30 according to one or more embodiments of the present application. The processing device 30 comprises a memory 310, a processor 320, and a computer program 330 stored on the memory 310 and executable on the processor 320, and the execution of the computer program 330 causes the method as shown in Fig. 1 or Fig. 2 to be performed.

[0062] Fig. 4 is a schematic block diagram of the terminal 40 according to one or more embodiments of the present application. As shown in Fig. 4, the terminal 40 includes a processing device 410, a sound generating unit 420 for generating a sound signal corresponding to the challenge task number, and a sound pickup unit 430 for picking up the sound signal. Exemplarily, the terminal 40 can be a smartphone, a tablet computer, a notebook computer, a desktop computer, an in-vehicle infotainment system, an AR or VR device, etc. The processing device 410 can be the processing device 30 shown in Fig. 3 or the processing device 201 shown in Fig. 2.

[0063] In addition, the present application can also be implemented as a computer readable storage medium in which a program for causing a computer to execute the method shown in Fig. 1 or Fig. 2 is stored. Here, as the computer readable storage medium, various types of computer readable storage media such as a disk type (e.g., a magnetic disk, an optical disk, etc.), a card type (e.g., a memory card, an optical card, etc.), a semiconductor memory type (e.g., a ROM, a non-volatile memory, etc.), a tape type (e.g., a magnetic tape, a cassette tape, etc.), etc. can be used.

[0064] The present disclosure can also be implemented as a computer program product including a computer program that, when executed by a processor, implements the program of the method shown in Fig. 1 or Fig. 2.

[0065] The relevant user personal information that can be involved in the embodiments of the present application is strictly in accordance with the requirements of laws and regulations, and follows the principles of legality, legitimacy and necessity, and is based on the reasonable purpose of the business scene. The information is provided by the user in the process of using the product / service or generated due to the use of the product / service, and is authorized by the user. The present application attaches great importance to the security of user personal information, and has taken security protection measures in accordance with industry standards, which are reasonable and feasible to protect information from unauthorized access, public disclosure, use, modification, damage or loss.

[0066] In applicable cases, various embodiments provided by the present application can be implemented using hardware, software or a combination of hardware and software. Moreover, in applicable cases, various hardware components and / or software components set forth herein can be combined into a composite component including software, hardware and / or both without departing from the scope of the present application. In applicable cases, various hardware components and / or software components set forth herein can be divided into sub-components including software, hardware or both without departing from the scope of the present application. In addition, in applicable cases, it is contemplated that software components can be implemented as hardware components, and vice versa.

[0067] Software (such as program code and / or data) according to this application can be stored on one or more computer-readable storage media. It is also contemplated that software identified herein can be implemented using one or more general purpose or special purpose computers and / or computer systems, networked and / or otherwise. Where applicable, the order of the blocks can be changed, combined into composite blocks and / or separated into sub- blocks to provide for code efficiency, for controllability or

[0068] The embodiments and examples set forth herein are presented to best explain and provide overall structure of the application in such full, complete and exemplary details, to enable those skilled in the art to provide and use the application. Any descriptions of the embodiments and examples presented herein are not intended to limit or restrict the scope or application of the application. However, it will be apparent to those skilled in the art that various modifications and changes can be made without departing from the scope or spirit of the application.

Claims

1. A method for determining authenticity of a terminal, characterized by, The method comprises the following steps: sending a randomly generated challenge task number to a sound generating unit of the terminal, so that the sound generating unit generates a sound signal corresponding to the challenge task number; receiving a sound pickup signal collected by a sound pickup unit of the terminal; performing consistency analysis on signal features of the sound signal and the sound pickup signal; and determining authenticity of the terminal based on the consistency analysis result.

2. The method of claim 1, wherein, The method further comprises: in response to receiving a start response returned by the sound generating unit, sending a sound pickup instruction to the sound pickup unit, wherein the start response is used to indicate that the sound generating unit has started to generate the sound signal.

3. The method of claim 1, wherein, The method further comprises: reducing the delay between the generation of the sound signal and the collection of the sound pickup signal by using a thread synchronization mechanism.

4. The method of claim 1, wherein, The method further comprises: eliminating non-target frequencies in the sound pickup signal by using a filter; and / or performing delay compensation on the sound pickup signal according to the delay characteristics of the terminal.

5. The method of claim 1, wherein, The challenge task number is generated and encrypted by a trusted execution environment or a background of the terminal.

6. The method of claim 1, wherein, The sound generating unit obtains sound parameters corresponding to the challenge task number according to a predefined mapping rule, wherein the sound parameters include one or more of frequency, amplitude, waveform, and duration.

7. The method of claim 1, wherein, The sound signal is an audio signal with fixed duration and frequency greater than 18 kHz.

8. The method of claim 1, wherein, The consistency analysis on the signal features of the sound signal and the sound pickup signal comprises: obtaining the frequency spectrum of the sound signal and the sound pickup signal by using Fourier transform; extracting signal features from the frequency spectrum of the sound signal and the sound pickup signal, wherein the signal features include one or more of frequency, amplitude, frequency spectrum shape, and phase; and calculating the matching degree of the signal features of the sound signal and the sound pickup signal; and determining a consistency score based on the matching degree of each signal feature.

9. The method of claim 8, wherein, Determining authenticity of the terminal based on the consistency analysis result comprises: if the consistency score is greater than or equal to a preset threshold, determining that the terminal is a real terminal; if the consistency score is less than the preset threshold, determining that the terminal is a virtual terminal or a false terminal.

10. The method of claim 1, wherein, The method further comprises: in the case of determining that the terminal is a real terminal, opening the service permission of the terminal.

11. A processing device, characterized by comprises: a memory; a processor; and a computer program stored on the memory and executable on the processor, wherein execution of the computer program causes the following operations: sending a randomly generated challenge task number to a sound generating unit of the terminal, so that the sound generating unit generates a sound signal corresponding to the challenge task number; receiving a sound pickup signal collected by a sound pickup unit of the terminal; performing consistency analysis on signal features of the sound signal and the sound pickup signal; and determining authenticity of the terminal based on the consistency analysis result. Execution of the computer program further causes the following operations:

12. The processing device of claim 11, wherein, in response to receiving a start response returned by the sound generating unit, sending a sound pickup instruction to the sound pickup unit, wherein the start response is used to indicate that the sound generating unit has started to generate the sound signal. Execution of the computer program further causes the following operations:

13. The processing device of claim 11, wherein, ​ The thread synchronization mechanism is used to reduce the delay between the generation of the sound signal and the collection of the pickup signal.

14. The processing device of claim 11, wherein, The computer program is further configured to cause the following operations: The filter is used to eliminate non-target frequencies in the pickup signal; and / or The pickup signal is compensated for delay according to the delay characteristics of the terminal.

15. The processing device of claim 11, wherein, The challenge task number is generated and encrypted by a trusted execution environment or a background of the terminal.

16. The processing device of claim 11, wherein, The sound unit obtains sound parameters corresponding to the challenge task number according to a predefined mapping rule, and the sound parameters include one or more of frequency, amplitude, waveform, and duration.

17. The processing device of claim 11, wherein, The sound signal is an audio signal with a fixed duration and a frequency greater than 18 kHz.

18. The processing device of claim 11, wherein, The consistency analysis of the signal characteristics of the sound signal and the pickup signal includes: The Fourier transform is used to obtain the frequency spectrum of the sound signal and the pickup signal. Signal characteristics are extracted from the frequency spectrum of the sound signal and the pickup signal, and the signal characteristics include one or more of frequency, amplitude, spectral shape, and phase. The matching degree of the signal characteristics of the sound signal and the pickup signal is calculated; and The consistency score is determined based on the matching degree of each signal characteristic.

19. The processing device of claim 18, wherein, Based on the consistency analysis result, the authenticity of the terminal is determined as follows: If the consistency score is greater than or equal to a preset threshold, the terminal is determined to be a real terminal. If the consistency score is less than the preset threshold, the terminal is determined to be a virtual terminal or a false terminal.

20. The processing device of claim 11, wherein, The computer program is further configured to cause the following operations: If the terminal is determined to be a real terminal, the service authority of the terminal is opened.

21. A terminal, characterized by The processing device according to any one of claims 11-20; The sound unit is configured to generate a sound signal corresponding to a challenge task number. The pickup unit is configured to collect a pickup signal. The computer-readable storage medium includes instructions that, when executed, perform the method for determining the authenticity of the terminal according to any one of claims 1-10. The computer program is executed by the processor to implement the method for determining the authenticity of the terminal according to any one of claims 1-10.

22. A computer-readable storage medium, characterized in that, ​ 23. A computer program product, characterised in that, ​

Images