CN103188223B - Authentication method, apparatus and system - Google Patents

Abstract

The invention relates to an authentication method, device and system. Wherein, the authentication method includes: sending authentication request information to the first communication device; receiving characteristic information returned by the first communication device; obtaining registration information of the first communication device from a data storage center; judging whether the first communication device Whether the returned feature information is consistent with the feature information in the registration information, and if they are consistent, the authentication is passed. The authentication method, device and system of the present invention do not need manual operation, can realize automatic authentication, is convenient and quick, and can ensure the requirement of instant, fast and efficient exchange of data between users while improving security.

Description

Authentication method, device and system

technical field

The present invention relates to the communication field, in particular to an authentication method, device and system.

Background technique

At present, computers or mobile terminals (such as mobile phones) have widely used high-speed wireless transmission technology for data exchange, and Wi-Fi (IEEE802.11a/b/g/n standard), Bluetooth, Zigbee (IEEE802. 15.4 standard), UWB (Ultra Wideband, ultra-wideband wireless transmission) and other technologies. These high-speed wireless communications enable information exchange and function sharing between computers and mobile terminals or between mobile terminals. Users can implement streaming media file transmission, address book exchange, and shared access to the Internet in these mobile terminals. These high-speed wireless transmission technologies are all aimed at long-term, multiple users, and long-distance (more than 10 meters) data exchange applications. When using these high-speed wireless transmission technologies, users need to perform more complicated configurations, such as cumbersome settings for the first use, and it takes a while to find and connect to the host when using it again.

Currently, with the diversification and widespread use of mobile electronic devices, the application demand for instant sharing of data among multiple electronic devices is becoming more and more intense, such as between mobile terminals and between mobile terminals and computers. In order to enhance the security of data communication, the distance between multiple devices sharing data is usually very close (such as within 1 meter), but the data exchange is required to be very fast, timely and efficient, such as automatic connection when the slave device enters the set range of the master device And transmit data, if it moves out of the set range, it will automatically cut off the connection, etc.

Existing communication technologies require manual pairing every time a mobile terminal connects to a new mobile terminal or computer when a connection is established between mobile terminals or between a mobile terminal and one or more computers, which cannot satisfy users within such a short-distance range. Real-time, fast and efficient exchange of data requirements.

Contents of the invention

The technical problem to be solved by the present invention is to provide an authentication method, device and system, which can realize automatic authentication and is convenient and fast.

In order to solve the above technical problems, the present invention proposes an authentication method, including:

sending request authentication information to the first communication device;

receiving feature information returned by the first communication device;

obtaining registration information of the first communication device from a data storage center;

Judging whether the feature information returned by the first communication device is consistent with the feature information in the registration information, and if they are consistent, the authentication is passed.

Further, the above-mentioned authentication method may also have the following features, and before sending the authentication-required information to the first communication device, it further includes:

Detecting whether the distance between the first communication device and the device is within a preset communication distance range, and deciding whether to authenticate the first communication device according to the distance detection result.

Further, the above authentication method may also have the following characteristics, the feature information is any one of an identity number, a serial number, a random number, and an authentication key.

Further, the above authentication method may also have the following features, the first communication device is a mobile terminal.

In order to solve the above technical problems, the present invention also proposes an authentication device, including:

An authentication initiating module, configured to send authentication request information to the first communication device;

a receiving module, configured to receive the characteristic information returned by the first communication device;

An acquisition module, configured to acquire registration information of the first communication device from a data storage center;

A judging module, configured to judge whether the feature information returned by the first communication device is consistent with the feature information in the registration information, and if they are consistent, the authentication is passed.

Further, the above authentication device may also have the following characteristics, including:

A distance detection module, configured to detect whether the distance between the first communication device and the authentication device is within a preset communication distance range, and decide whether to authenticate the first communication device according to the distance detection result.

Further, the above-mentioned authentication device may also have the following characteristics, the feature information is any one of an identification number, a serial number, a random number, and an authentication key.

Further, the above authentication apparatus may also have the following features, the first communication device is a mobile terminal.

In order to solve the above technical problems, the present invention also proposes an authentication system, including:

an authentication device, configured to authenticate the first communication device;

The data storage center is connected to the authentication device through a network, and is used for storing registration information of the first communication device, and the registration information includes characteristic information.

Further, the above-mentioned authentication system may also have the following characteristics, and the authentication device includes:

An authentication initiating module, configured to send authentication request information to the first communication device;

a receiving module, configured to receive the characteristic information returned by the first communication device;

An acquisition module, configured to acquire registration information of the first communication device from a data storage center;

A judging module, configured to judge whether the feature information returned by the first communication device is consistent with the feature information in the registration information, and if they are consistent, the authentication is passed.

In order to solve the above technical problems, the present invention also proposes a communication device, which includes an authentication device, and the authentication device includes:

An authentication initiating module, configured to send authentication request information to the first communication device;

a receiving module, configured to receive the characteristic information returned by the first communication device;

An acquisition module, configured to acquire registration information of the first communication device from a data storage center;

A judging module, configured to judge whether the feature information returned by the first communication device is consistent with the feature information in the registration information, and if they are consistent, the authentication is passed.

Further, the above communication device may also have the following features, the communication device is a computer or a mobile terminal.

The authentication method, device and system of the present invention do not need manual operation, can realize automatic authentication, are convenient and fast, and can meet the requirement of instant, fast and efficient exchange of data between users while improving safety.

Description of drawings

Fig. 1 is the flowchart of authentication method in the embodiment of the present invention;

Fig. 2 is a structural block diagram of an authentication device in an embodiment of the present invention;

Fig. 3 is the structural block diagram of authentication system in the embodiment of the present invention;

FIG. 4 is a structural block diagram of a communication device in an embodiment of the present invention;

5 is a schematic diagram of the application of the authentication method in the embodiment of the present invention;

Fig. 6 is a structural block diagram of a short-distance communication module.

detailed description

The principles and features of the present invention are described below in conjunction with the accompanying drawings, and the examples given are only used to explain the present invention, and are not intended to limit the scope of the present invention.

FIG. 1 is a flowchart of an authentication method in an embodiment of the present invention. As shown in Figure 1, in this embodiment, the authentication method includes the following steps:

The premise of the authentication method in this embodiment is that after the first communication device successfully registers for the first time, the data storage center saves the registration information of the first communication device at the time of the first registration, and the registration information includes the characteristic information of the first communication device . That is to say, before performing the following step 101, the authentication method of the present invention may further include: the second communication device saves the registration information when the first communication device successfully registers to the data storage center, the registration information includes the first Characteristic information of the communication device. Wherein, the second communication device refers to the communication device that registers and authenticates the first communication device during the first registration.

Step 101, sending authentication request information to the first communication device;

Here, the first communication device may be a mobile terminal.

When applied to short-distance communication, before step 101, the authentication method also includes the following steps: detecting whether the distance between the first communication device and the device is within a preset communication distance range, and deciding whether to The first communication device is authenticated. If the distance detection result is that the distance between the first communication device and the device is within the preset communication distance range, a subsequent authentication process is performed on the first communication device. If the result of the distance detection is that the distance between the first communication device and the device is outside the preset communication distance range, the subsequent authentication process is not performed on the first communication device. Wherein, the present device refers to the device that executes the authentication method of the present invention. The present device may be a device performing short-range communication with the first communication device.

Step 102, receiving feature information returned by the first communication device;

After receiving the authentication request information, the first communication device returns its characteristic information. Wherein, the characteristic information may be an ID number (that is, an identification number), a serial number, a random number, an authentication key, and the like.

Step 103, obtaining the registration information of the first communication device from the data storage center;

The registration information of the first communication device stored in the data storage center is information that has passed authentication, and therefore is credible. The registration information of the first communication device stored in the data storage center includes characteristic information of the first communication device.

The data storage center is a system specially set up to save the registration information of each communication device for the convenience and quickness of authentication.

Step 104, judging whether the characteristic information returned by the first communication device is consistent with the characteristic information in the registration information, if consistent, execute step 105, otherwise execute step 106;

Step 105, the authentication is passed;

Step 106, the authentication fails.

The authentication method of the present invention enables manual registration between mobile terminals or a mobile terminal and a computer, and after successful authentication, the registration information is stored in a data storage center, and any networked mobile terminal or computer can access the data storage center. Next time when the mobile terminal is authenticated with other unauthenticated mobile terminals or computers, the mobile terminal or computer will automatically access the data storage center to retrieve the registration information, and the automatic authentication can be completed without manual operation.

The authentication method of the present invention can be applied to short-distance communication systems and methods, as shown in FIG. 5 . Fig. 5 is a schematic diagram of the application of the authentication method in the embodiment of the present invention. In FIG. 5 , the short-distance communication system includes a first mobile terminal 501 , a first computer 502 , a second computer 503 and a second mobile terminal 504 . When the distance between the first mobile terminal 501 , the first computer 502 , the second computer 503 and the second mobile terminal 504 meets the setting requirements, high-speed wireless communication can be performed. When the first mobile terminal 501 is used in the communication system for the first time, it needs to be registered. Assuming that the first mobile terminal 501 communicates with the first computer 502 when it is used in the communication system for the first time, after the first mobile terminal 501 and the first computer 502 establish a short-distance communication connection and before data exchange, the first computer 502 requires The first mobile terminal 501 performs registration and authentication, and the process is:

1. The first computer 502 sends registration request information to the first mobile terminal 501;

2. The first mobile terminal 501 inputs and confirms its own characteristic information according to the content requirements of the registration information;

3. The first mobile terminal 501 sends the registration completion information to the first computer 502;

4. The first computer 502 judges whether the registration information of the first mobile terminal 501 is correct, and if it is correct, uploads the registration information of the first mobile terminal 501 to the data storage center for preservation, otherwise it will not upload the registration information of the first mobile terminal 501 Upload to the data storage center for saving.

After the first registration, the registration information of the first mobile terminal 501 is saved in the data storage center, and the registration information includes characteristic information of the first mobile terminal 501 .

When used in the communication system shown in FIG. 5 next time, the first mobile terminal 501 and the second computer 503 or the second mobile terminal 504 that have not authenticated the first mobile terminal 501 after establishing a short-distance communication connection, carry out data Before the exchange, the authentication process of the first mobile terminal 501 by the second computer 503 or the second mobile terminal 504 is (taking the second computer 503 as an example):

The second computer 503 sends authentication request information to the first mobile terminal 501;

The second computer 503 receives the feature information returned by the first mobile terminal 501;

The second computer 503 acquires the registration information of the first mobile terminal 501 from the data storage center;

The second computer 503 judges whether the feature information returned by the first mobile terminal 501 is consistent with the feature information in the registration information, and if they are consistent, the authentication passes; otherwise, the authentication fails.

It can be seen that the authentication method of the present invention enables the authentication between communication devices in the short-distance communication system to be completed automatically without manual operation, which not only meets the requirements of instant, fast and efficient data exchange in the short-distance communication system, but also improves security of short distance communication.

The authentication method of the present invention does not need manual operation, can realize automatic authentication, is convenient and fast, and can meet the requirement of instant, fast and efficient exchange of data between users while improving safety.

Fig. 2 is a structural block diagram of an authentication device in an embodiment of the present invention. As shown in FIG. 2 , in this embodiment, the authentication device 10 includes an authentication initiating module 110 , a receiving module 120 , an acquiring module 130 and a judging module 140 . Wherein, the authentication initiating module 110 is configured to send authentication request information to the first communication device. The receiving module 120 is configured to receive feature information returned by the first communication device. The acquiring module 130 is configured to acquire the registration information of the first communication device from the data storage center. The judging module 140 is used to judge whether the feature information returned by the first communication device is consistent with the feature information in the registration information, and if they are consistent, the authentication is passed. The authentication device 10 shown in FIG. 2 can implement the flow of the authentication method shown in FIG. 1 .

Wherein, the first communication device may be a mobile terminal.

Wherein, the characteristic information may be an ID number (that is, an identification number), a serial number, a random number, an authentication key, and the like.

Wherein, the registration information of the first communication device stored in the data storage center is information that has passed authentication, and therefore is credible. The registration information of the first communication device stored in the data storage center includes characteristic information of the first communication device.

In other embodiments of the present invention, the authentication device may further include a distance detection module. The distance detection module is used to detect whether the distance between the first communication device and the authentication device is within a preset communication distance range, and decide whether to authenticate the first communication device according to the distance detection result. If the distance detection result of the distance detection module is that the distance between the first communication device and the authentication device is within the preset communication distance range, the authentication initiating module 110 is activated to perform subsequent authentication procedures on the first communication device. If the distance detection result of the distance detection module is that the distance between the first communication device and the authentication device is outside the preset communication distance range, the authentication initiating module 110 will not be activated, and the subsequent authentication process will not be performed on the first communication device. The distance detection module enables the authentication device of the present invention to be applied in a short distance communication system.

The authentication device of the present invention can be placed in short-distance communication equipment. In this way, the short-distance communication device can use the authentication device of the present invention to perform authentication through the flow of the authentication method of the present invention.

The authentication device of the present invention does not require manual operation, can realize automatic authentication, is convenient and fast, and can meet the requirement of instant, fast and efficient exchange of data between users while improving safety.

Fig. 3 is a structural block diagram of the authentication system in the embodiment of the present invention. As shown in FIG. 3 , in this embodiment, the authentication system includes an authentication device 10 and a data storage center 20 . Wherein, the authentication device 10 is used for authenticating the first communication device. The data storage center 20 is connected to the authentication device 10 through a network, and is used for storing registration information of the first communication device, and the registration information includes characteristic information.

Wherein, the structure of the authentication device 10 is shown in FIG. 2 . The composition of the authentication device 10 has been described above and will not be repeated here.

Wherein, the first communication device may be a mobile terminal.

Wherein, the characteristic information may be an ID number (that is, an identification number), a serial number, a random number, an authentication key, and the like. The authentication system of the present invention does not need manual operation, can realize automatic authentication, is convenient and quick, and can meet the requirement of instant, fast and efficient exchange of data between users while improving safety.

Fig. 4 is a structural block diagram of a communication device in an embodiment of the present invention. As shown in FIG. 4 , in this embodiment, the communication device 30 includes an authentication device 10 . The authentication device 10 includes an authentication initiating module 110 , a receiving module 120 , an acquiring module 130 and a judging module 140 . Wherein, the authentication initiating module 110 is configured to send authentication request information to the first communication device. The receiving module 120 is configured to receive feature information returned by the first communication device. The acquiring module 130 is configured to acquire the registration information of the first communication device from the data storage center. The judging module 140 is used to judge whether the feature information returned by the first communication device is consistent with the feature information in the registration information, and if they are consistent, the authentication is passed. The communication device 30 may be a short-distance communication device, such as a mobile terminal or a computer. The communication device 30 may be used in a short-range communication system.

Wherein, the first communication device may be a mobile terminal.

Wherein, the characteristic information may be an ID number (that is, an identification number), a serial number, a random number, an authentication key, and the like.

It should be noted that the communication devices of the present invention are all communication devices capable of short-distance communication, and these communication devices all include the short-distance communication module 300 shown in FIG. 6 . Fig. 6 is a structural block diagram of a short-distance communication module. As shown in FIG. 6 , the short-range communication module 300 includes a control unit 301 , a reference unit 302 , a wireless communication unit 303 and a measurement unit 304 . Wherein, the control unit 301 controls the sending and receiving of the reference unit 302 and the wireless communication unit 303, and at the same time performs processing such as data encryption on the sent and received data. The reference unit 302 and the test unit 304 are used to limit the communication distance. The reference unit 302 is used for sending a distance reference signal including short-range communication module information and communication distance information. The testing unit 304 is configured to receive a distance reference signal containing short-range communication module information and communication distance information. The wireless communication unit 303 is used to establish a wireless communication connection and perform data exchange.

The short-distance communication process of the communication device of the present invention is illustrated below with an example. Take the short-range communication system shown in FIG. 5 as an example. The first mobile terminal 501 , the first computer 502 , the second computer 503 and the second mobile terminal 504 shown in FIG. 5 all have the short-distance communication module 300 shown in FIG. 6 . When the first mobile terminal 501 initiates communication with the first computer 502 as required, the reference unit in the first mobile terminal 501 will send a distance reference signal to the measuring unit in the first computer 502 . After the measurement unit in the first computer 502 receives the distance reference signal, it judges whether the distance between the first mobile terminal 501 and the first computer 502 satisfies the preset distance range, and if it meets the first mobile terminal contained in the distance reference signal. The terminal 501 transmits information to the control unit of the first computer 502 . After the control unit of the first computer 502 receives the information from the first mobile terminal 501, the wireless communication units in the two communication devices, the first mobile terminal 501 and the first computer 502, quickly establish a wireless communication connection according to a preset protocol and perform Registration, Authentication and Data Exchange. The authentication process can adopt the authentication method of the present invention. Certainly, the near-field communication system to which the authentication method of the present invention is applicable is not limited to the communication system shown in FIG. . The communication device of the present invention has an authentication device, does not need manual operation, can realize automatic authentication, is convenient and quick, and can ensure instant, fast and efficient exchange of data between users while improving safety.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included in the protection of the present invention. within range.

Claims (9)

1. A kind of 1. authentication method, it is characterised in that, including：

   Sent to the first communication equipment and require authentication information；

   Receive the characteristic information that first communication equipment returns；

   The log-on message of first communication equipment is obtained from data storage center；

   Judge whether the characteristic information that first communication equipment returns is consistent with the characteristic information in the log-on message, if one Then certification is caused to pass through；

   Sent to the first communication equipment and require also to include before authentication information：

   Log-on message when second communication equipment succeeds in registration the first communication equipment first is saved in data storage center, described The characteristic information of the first communication equipment is included in log-on message, wherein, communicated when the second communication equipment is registers first to first Equipment is registered and the communication equipment of certification；

   The log-on message by being then stored in data storage center, mobile terminal or computer may have access to institute by certification Data storage center is stated, if when the next mobile terminal and mobile terminal or the computer certification of unverified mistake, it is mobile whole End or computer can access data storage center retrieval log-on message automatically；

   It is described to the first communication equipment send require authentication information before also include：

   The distance between first communication equipment and this equipment are detected whether in the range of default communication distance, and according to away from Decide whether to be authenticated first communication equipment from testing result.
2. 2. authentication method according to claim 1, it is characterised in that, the characteristic information is identity number, sequence Number, any one in random number, certification key.
3. 3. authentication method according to claim 1, it is characterised in that, first communication equipment is mobile terminal.
4. A kind of 4. authentication device, it is characterised in that, including：

   Certification initiation module, authentication information is required for being sent to the first communication equipment；

   Receiving module, the characteristic information returned for receiving first communication equipment；

   Acquisition module, for obtaining the log-on message of first communication equipment from data storage center；

   Judge module, for judge characteristic information that first communication equipment returns whether with the feature in the log-on message Information is consistent, if consistent certification pass through；

   Second communication equipment, log-on message during for the first communication equipment to be succeeded in registration first are saved in data storage The heart, the characteristic information of the first communication equipment is included in the log-on message, wherein, to the when the second communication equipment is registers first One communication equipment is registered and the communication equipment of certification；

   The log-on message by being then stored in data storage center, mobile terminal or computer may have access to institute by certification Data storage center is stated, if when the next mobile terminal and mobile terminal or the computer certification of unverified mistake, it is mobile whole End or computer can access data storage center retrieval log-on message automatically；

   Also include apart from detection module, for whether detecting the distance between first communication equipment and the authentication device pre- If communication distance in the range of, and decide whether to be authenticated first communication equipment according to apart from testing result.
5. 5. authentication device according to claim 4, it is characterised in that, the characteristic information is identity number, sequence Number, any one in random number, certification key.
6. 6. authentication device according to claim 4, it is characterised in that, first communication equipment is mobile terminal.
7. A kind of 7. Verification System, it is characterised in that including：

   Authentication device, for being authenticated to the first communication equipment；

   Data storage center, it is connected by network with the authentication device, the registration for storing first communication equipment is believed Breath, the log-on message include characteristic information；

   The authentication device includes：

   Certification initiation module, authentication information is required for being sent to the first communication equipment；

   Receiving module, the characteristic information returned for receiving first communication equipment；

   Acquisition module, for obtaining the log-on message of first communication equipment from data storage center；

   Judge module, for judge characteristic information that first communication equipment returns whether with the feature in the log-on message Information is consistent, if consistent certification pass through；

   Second communication equipment, log-on message during for the first communication equipment to be succeeded in registration first are saved in data storage The heart, the characteristic information of the first communication equipment is included in the log-on message, wherein, to the when the second communication equipment is registers first One communication equipment is registered and the communication equipment of certification；

   The log-on message by being then stored in data storage center, mobile terminal or computer may have access to institute by certification Data storage center is stated, if when the next mobile terminal and mobile terminal or the computer certification of unverified mistake, it is mobile whole End or computer can access data storage center retrieval log-on message automatically.
8. 8. a kind of communication equipment, it is characterised in that the communication equipment includes authentication device, and the authentication device includes：

   Certification initiation module, authentication information is required for being sent to the first communication equipment；

   Receiving module, the characteristic information returned for receiving first communication equipment；

   Acquisition module, for obtaining the log-on message of first communication equipment from data storage center；

   Judge module, for judge characteristic information that first communication equipment returns whether with the feature in the log-on message Information is consistent, if consistent certification pass through；

   Second communication equipment, log-on message during for the first communication equipment to be succeeded in registration first are saved in data storage The heart, the characteristic information of the first communication equipment is included in the log-on message, wherein, to the when the second communication equipment is registers first One communication equipment is registered and the communication equipment of certification；

   The log-on message by being then stored in data storage center, mobile terminal or computer may have access to institute by certification Data storage center is stated, if when the next mobile terminal and mobile terminal or the computer certification of unverified mistake, it is mobile whole End or computer can access data storage center retrieval log-on message automatically.
9. 9. communication equipment according to claim 8, it is characterised in that, the communication equipment is computer or mobile terminal.