CN104636653A - System method for realizing user identity authentication based on non-contact mode by intelligent terminal equipment - Google Patents

Abstract

The present invention provides a system method for realizing user identity authentication based on a contactless method for an intelligent terminal device. The system comprises: an intelligent terminal device, a module device for authenticating the user identity (such as an infrared device, a Bluetooth device, an RFID device, etc.), and the intelligent terminal device realizes the authentication protocol by communicating with the identity authentication module device in a contactless manner. The authentication method comprises the following steps: first, the module device for identity authentication is made into a wearable object (such as a bracelet, a ring, etc.) and worn on the human body; second, when the intelligent terminal device is to be used, the intelligent terminal device sends a password inquiry command to the module device for authentication, and the module device answers the password, and the intelligent terminal device realizes the identity authentication of the user by verifying the password. The authentication method simplifies the user identity identification process of the intelligent terminal device, realizes the unification of the identity authentication method in various intelligent terminal device applications, and facilitates the simple implementation of various application services of the intelligent terminal device. The system can form a more powerful authentication system by combining the multi-factor authentication method of the intelligent terminal device.

Description

A system method for an intelligent terminal device to realize user identity authentication based on a non-contact method

technical field

The invention relates to the field of communication of intelligent terminal equipment and the field of terminal security, in particular, the identity authentication of intelligent terminal users is realized by exchanging data in a non-contact manner with a small distance between the intelligent terminal equipment and authentication equipment. the

the

Background technique

With the rapid development of electronic communication technology, smart terminal devices including smart phones are more and more widely used, but these smart terminal devices bring great convenience to people, but also bring security of smart terminal devices Sexual problems, such as: illegal use of smart terminal devices by non-authenticated users, resulting in violation of the privacy of smart terminal device users. the

In order to improve the security of smart terminal equipment, the following three types of user identity authentication methods have emerged in the prior art: traditional identification technologies based on user knowledge (such as passwords, pattern locks, etc.), identification technologies based on biometrics (such as face recognition, fingerprint recognition, etc.) and user authentication methods based on behavioral characteristics. the

Among them, the traditional identification technology based on user knowledge mainly performs the following operations: the authenticated user pre-sets a set of authentication information in the smart terminal device, such as passwords such as numbers and letters or graphics. To identify the identity of the user, the smart terminal device requires the user to input authentication information again. If the input authentication information is consistent with the preset authentication information, the user is considered to be an authenticated user; otherwise, the user is considered to be an unauthenticated user. the

The traditional identification technology based on user knowledge has the following disadvantages: 1) Low security level: First, due to the limitation of the smart terminal device itself, the information used for identity authentication cannot be too long, so it is easy to be attacked by brute force and lacks security. Another reason is that when the user enters the authentication information, it is easy to be peeped and imitated by other people around, which reduces the security. 2) Not easy to remember: In order to increase security, multiple personal electronic devices use different passwords. Due to the increase in the number of personal electronic devices, many passwords need to be memorized, which brings inconvenience to users in memory and may cause forgotten passwords to fail certification status. 3) Poor convenience and quickness: the way of inputting authentication information is more complicated, which increases the difficulty of authentication for normal people, and is even more inconvenient for the old, weak, sick, and disabled. the

The identification technology based on biometric authentication can avoid the above shortcomings, because the identification technology has the following characteristics: 1) The characteristic information of biometric authentication is difficult to be imitated or cracked, and non-authenticated users cannot obtain authentication information through peeping or brute force attacks, and through intelligent Authentication of terminal equipment; 2) Authentication information identification technology based on biometrics is the authentication of the inherent information of the user's biometrics, and does not require the user to memorize any preset information, and there is no situation where the user cannot pass the verification because the authentication information is forgotten; 3 ) Most of the existing identification technologies based on biometric information are simple to operate, do not require cumbersome unlocking processes, and have good convenience. the

At present, more mature biometric technologies include: fingerprint recognition, iris recognition, face recognition, voice recognition, etc. Among them, fingerprint recognition, iris recognition and other methods have the highest recognition accuracy. However, limited by the hardware resources of smart terminal devices, special equipment needs to be added when applying these two types of identification technologies on smart terminal devices, which greatly increases the cost of smart terminal devices and cannot be widely used. Face recognition and voice recognition technologies can directly use the resources of smart terminal devices such as smartphones (such as cameras and microphones) without additional equipment, which is convenient for large-scale applications. However, the use of this type of identification technology will consume a large amount of resources of the smart terminal device and affect the normal operation of other functions of the smart terminal device. At the same time, changes in the surrounding environment, such as light, damage to fingerprints and other features, will also have a great impact on the recognition effect, and the robustness is low, thus reducing the user experience effect. the

The user identity authentication method based on human behavior characteristics identifies the user's behavior characteristics, and determines whether the behavior is a unique behavior characteristic of the owner of the smart terminal device according to a certain range of judgment. The advantage of this method is that it avoids the inconvenience caused by the verification judgment based on the user's knowledge, and also avoids the inherent weakness of the biometric identification technology. The user will feel convenient and quick to use, and the user experience effect is improved. the

At present, a user identification method based on human behavior characteristics has appeared. Since it uses a judgment method based on a range, its identification accuracy needs to be improved. Another feature of this method is that it needs to use more computing resources, so this method needs to be further simplified on the algorithm. the

Contents of the invention

The purpose of the present invention is to provide a convenient, fast, and highly secure identity authentication method for smart terminal equipment, so that users hardly realize that they have passed identity authentication during the use of smart terminal equipment, which is very convenient and intelligent. Various secure and simple implementations of various application services of terminal equipment. the

The method of the present invention comprises the steps:

1) Store the same password random number seed in the smart terminal device and the authentication module device respectively, and the authentication module device

Perform n hash operations with the smart terminal device respectively, and store the results of n hash operations;

2) When the smart terminal device needs to verify the identity of the user for the i-th time, he sends the i-th identity authentication command to the authentication module device, and the authentication module device takes out the result of the n-i+1 hash operation, and the result The value is sent back to the smart terminal device;

3) The smart terminal device compares the received data with the result of the n-i+1th hash operation stored in its own memory, and if they are the same, the authentication is successful;

4) When the value of the n hashes is used up, the two devices (or devices) store the same password random number seed at the same time (there are many ways to generate the random number, for example, the Diffie-Hellan public key generation method can be used and so on to generate random numbers), and then repeat steps 1) to 3).

The non-contact authentication module of the intelligent terminal device has the following characteristics:

1) It can be made into a wearable object that is easy to carry by the human body, which is convenient for wireless identification between smart terminal equipment and users (including non-contact methods such as infrared rays);

2) The identity authentication module and the user have undergone safe and strict identity authentication, and the user regularly performs this identity authentication to ensure that the authentication module becomes an inseparable part of the user;

3) The identity authentication module can perform calculation and storage, and realize simple identity authentication verification.

An intelligent terminal device user identity authentication system, which consists of a contactless authentication module, an intelligent terminal device, and an

An authentication system for secure and strict authentication of the contact module (the authentication system can be composed of conventional biometrics, passwords, etc.

authentication implementation) composition.

The feature of the present invention is that it actually combines the authentication method based on knowledge and the authentication method based on human biological characteristics.

It is convenient for users of various smart terminal devices (including the old, weak, sick, disabled, etc.) to perform identity authentication, and can basically

Unify the user identity authentication scheme for smart terminal devices; when the smart terminal device is a certain distance away from the non-contact authentication module

After that, security authentication cannot be performed again, which prevents the possibility of the smart terminal device being stolen and ensures that the smart terminal device

safety.

Description of drawings

Figure 1 is a structural diagram of the smart terminal device user identification system of the present invention. the

Fig. 2 is an algorithm implementation flow chart of the smart terminal device user identification method of the present invention. the

Detailed ways

The implementation content of the present invention will be described in detail below with reference to the accompanying drawings. the

As shown in Figure 1, the intelligent terminal user identity recognition system of the present invention consists of a contactless authentication module, a non-contact authentication

The authentication component for multi-factor authentication of the authentication module itself, and the intelligent terminal device itself. Among them, the contactless authentication module itself

The authentication component for multi-factor authentication can be implemented by an existing authentication server, or completed by a separate authentication device.

As shown in Figure 2, the smart terminal device user identification method of the present invention is:

Step S01, perform multi-factor authentication on the non-contact authentication module itself (can be realized by an existing authentication server, or

Completed by a separate authentication device. );

Step S02, the number of the user of the smart terminal device (such as the mobile phone number of the mobile phone user or the MAC address of the mobile phone)

address code) to the non-contact authentication module, and the non-contact authentication module stores the number;

Step S03, the random number seeds of passwords generated by methods such as Diffie-Hellman are respectively stored in the smart terminal device

In the equipment and authentication module device, the authentication module device and the intelligent terminal device perform n hash operations respectively, and store the results of n hash operations;

Step S04, the specific authentication steps are as follows:

1) Every time the smart terminal device performs password authentication, it first sends its own number to the non-contact authentication module, and the non-contact authentication module compares the number with the number stored in its own memory, and then enters the authentication process, otherwise it rejects the authentication. This is the authentication of the smart terminal device by the non-contact authentication module;

2) When the smart terminal device needs to verify the identity of the user for the i-th time, he sends the i-th identity authentication command to the authentication module device, and the authentication module device takes out the result of the n-i+1 hash operation, and the result The value is sent back to the smart terminal device;

3) The smart terminal device compares the received data with the result of the n-i+1th hash operation stored in its own memory, and if they are the same, the authentication is successful;

4) When the value of the n hashes is used up, the two devices (or devices) store the same password random number seed at the same time (there are many ways to generate the random number, for example, the Diffie-Hellan public key generation method can be used and so on to generate random numbers), and then repeat steps 1) to 3).

During the implementation of the solution of the present invention, the identity authentication process of the smart terminal device to the user is carried out automatically, and the user does not need to perform any intervention, unless the smart terminal device is separated from the user by a certain distance, it will cause the effect that the identity cannot be verified. Therefore, the smart terminal The device can automatically identify the user to ensure that only legitimate users can operate the smart terminal device, which meets the user's demand for smart terminal devices with security authentication functions. the

Claims (6)

1. A system method for an intelligent terminal device to realize user identity authentication based on a non-contact manner, comprising the steps of: 1) Store the same password random number seed in the smart terminal device and the authentication module device respectively, the authentication module device and the smart terminal device perform n hash operations respectively, and store the results of the n hash operations; 2) When the smart terminal device needs to verify the identity of the user for the ith time, he sends an identity authentication command for the ith time to the authentication module device, and the authentication module device takes out the result of the n-i+1 hash operation, and uses the result The value is sent back to the smart terminal device; 3) The intelligent terminal device compares the received data with the result of the n-i+1th hash operation stored in its own memory, and if they are the same, the authentication is successful; 4) When the value of the n hashes is used up, the two devices (or devices) store the same password random number seed at the same time (there are many ways to generate the random number, for example, the Diffie-Hellan public key generation method can be used and so on to generate random numbers), and then repeat steps 1) to 3). 2. The system and method for user identity authentication by intelligent terminal equipment according to claim 1, characterized in that the authentication module can be made into a wearable object for the human body, and the module can perform hash function calculation and communication. 3. The method for identifying the user identity of a smart terminal device according to claim 1, the wearable object can realize the biometric authentication of the user on a special device, so that the wearable object can truly become an inseparable part of the user. part. 4. The method for identifying the user identity of an intelligent terminal device according to claim 1, when the intelligent terminal device reaches a certain distance away from the wearable object of the human body, the intelligent terminal device becomes an unusable intelligent terminal because it cannot authenticate the user identity user equipment. 5. The method for identifying the user identity of an intelligent terminal device according to claim 1, in order to ensure that the non-contact authentication module device is not illegally used, the authentication module must be biometrically authenticated or otherwise authenticated in a fixed period of time, or Multi-factor authentication. 6. The identity authentication system method of the intelligent terminal device to the user according to claim 1, characterized in that it is a non-contact method, which includes all non-contact technologies, such as non-contact authentication realized by infrared, bluetooth technology, RFID technology, etc.