Embodiment
The embodiment of the invention provides a kind of access authentication method and relevant device and communication system of remote control terminal service, and the flexibility that is conducive to improve access authentication can realize the access authentication of high security.
For so that goal of the invention of the present invention, feature, advantage can be more obvious and understandable, below in conjunction with the accompanying drawing in the embodiment of the invention, technical scheme in the embodiment of the invention is clearly and completely described, obviously, described embodiment only is the present invention's part embodiment, but not whole embodiment.Based on the embodiment among the present invention, those of ordinary skills belong to the scope of protection of the invention not making the every other embodiment that obtains under the creative work prerequisite.
Embodiment one
Referring to Fig. 1, the embodiment of the invention one is an a kind of embodiment of access authentication method of remote control terminal service, comprising:
110, receive the calling of calling terminal, obtain the sign of this calling terminal.
Under a kind of application scenarios, for example terminal called can receive the calling of calling terminal, and obtains the sign of this calling terminal according to the calling that receives.
Wherein, the terminal iidentification of mentioning in the embodiment of the invention can be device identification in the unique network of the overall situation, for example can be media access control (MAC, Media Access Control) address, international mobile subscriber identity (IMSI, international mobile subscriber identity) or network access Identifier (NAI, Network Access Identifier) etc.; Can certainly be can this terminal equipment of unique identification a label, for example device numbering or implementor name etc. are not done restriction herein.
120, the sign that accesses terminal according to the sign of this calling terminal and allowing of presetting and the corresponding relation of authentication mode determine calling terminal is carried out the authentication mode of access authentication.
In actual applications, for example can be first preset in terminal called (or terminal called can directly access certain equipment) and allow the sign that accesses terminal and the mapping corresponding relation of corresponding authentication mode (one or more), this corresponding relation for example can carry out record by tables of data.
Further, for satisfying the needs of many scenes, terminal called is such as supporting the multiple authentication modes such as cipher authentication, pattern authentication, recognition of face authentication, fingerprint recognition authentication, speech recognition authentication, the authentication of prompting problem.Specifically can according to the data-handling capacity of different calling terminals and application scenarios etc., preset the authentication mode corresponding with its terminal iidentification.
When terminal called receives the calling of calling terminal, terminal called can be according to the sign of this calling terminal that obtains, in the mapping corresponding relation of the terminal iidentification that presets and authentication mode, search occurrence, and then according to the lookup result of occurrence, determine the authentication mode that this calling terminal is carried out access authentication.
130, according to the authentication mode of determining above-mentioned calling terminal is carried out access authentication.
When terminal called determine this calling terminal carried out the authentication mode of access authentication after, just can carry out alternately this calling terminal being carried out access authentication according to the authentication mode of determining and calling terminal.
If the access authentication of calling terminal passes through, just terminal called can further be opened corresponding remote control terminal service to calling terminal, calling terminal then uses this remote control terminal service.For instance, for example terminal called is that the operations such as calling terminal can be left a message to this terminal called and be listened to, deletion are installed at home or the fixed line of office; For example terminal called is for installing watch-dog at home again, and calling terminal then can be by the situation among this watch-dog observer, by that analogy.In addition, if the access authentication of calling terminal does not pass through, then terminal called for example can stop the conversation with calling terminal.
Need to prove that the calling terminal in the present embodiment and terminal called for example can be computer, portable machine, mobile phone, intelligent terminal, vehicle mounted communication equipment, landline telephone or other terminal equipment.
Therefore, the scheme of the embodiment of the invention presets each and allows the sign that accesses terminal and the corresponding relation of corresponding authentication mode in terminal called, can realize that terminal called is according to the difference of calling terminal, select suitable authentication mode that this calling terminal is carried out access authentication, be conducive to improve the flexibility of calling terminal being carried out access authentication, and the authentication mode with greater security can be provided.
Embodiment two
For ease of better understanding the technical scheme of the embodiment of the invention, the process that the below realizes remote control terminal service take terminal A and terminal B is carried out further detailed description as example.
Are another embodiment of a kind of access authentication method of remote control terminal service referring to Fig. 2, the embodiment of the invention two, specifically can comprise:
201, the calling of terminal B receiving terminal A;
Wherein, this sentences the terminal called of terminal B, and terminal A is that calling terminal is example.
Terminal A makes a call to terminal B according to corresponding communication modes, the calling of terminal B receiving terminal A, the sign of acquisition terminal A.
Be appreciated that, terminal B can be device identification in the unique network of the overall situation according to the sign of the terminal A of the calling acquisition of the terminal A that receives, for example can be MAC Address, IMSI, the NAI of terminal A or also can be can unique identification terminal A a label, for example device numbering or implementor name etc. are not done restriction herein.
202, terminal B judges the current remote terminal service control of whether having opened;
In actual applications, the user for example can in advance in one or more remote terminal service controls of terminal B configuration, for example can dispose long-range message operation service and/or other business.
Terminal B can judge first currently whether opened the remote terminal service control after the calling that receives terminal A, if the current remote terminal service control of having opened, then execution in step 203; If the current remote terminal service control of not opening then can be carried out normal dial-up and be processed.
Terminal B also can give tacit consent to the current remote terminal service control of having opened, directly execution in step 203.
203, the calling of terminal B automatic-answering back device terminal A;
204, terminal B is according to the sign of the terminal A that obtains, searches definite authentication mode that terminal A is carried out access authentication in the corresponding relation of sign that allowing of presetting accesses terminal and authentication mode;
In actual applications, can be first preset terminal B and allow the sign that accesses terminal and the mapping corresponding relation of corresponding authentication mode in terminal B (or terminal B can directly access certain equipment), this corresponding relation for example can carry out record by relation database table.
Terminal B can support the multiple authentication modes such as cipher authentication, pattern authentication, recognition of face authentication, fingerprint recognition authentication, speech recognition authentication, the authentication of prompting problem such as being configured to, satisfying the needs of plurality of application scenes, and dispose the corresponding parameters for authentication of each authentication mode.
The user can according to data-handling capacity and the application scenarios of its employed different terminals, preset the authentication mode corresponding with the sign of this terminal.
For instance, the user presets in terminal B allows the corresponding relation of the sign that accesses terminal and authentication mode can be as shown in table 1, but is not limited to this:
Table 1
Sequence number |
Allow the sign that accesses terminal |
Authentication mode |
1 |
The sign of terminal A |
Authentication mode 1 |
2 |
The sign of terminal C |
Authentication mode 2 |
3 |
The sign of terminal D |
Authentication mode 3 |
4 |
The sign of terminal E |
Authentication mode 2 |
5 |
The sign of terminal F |
Authentication mode 1 and authentication mode 4 |
6 |
The sign of terminal G |
Authentication mode 2 and authentication mode 3 |
Can find out, if the sign that allowing of presetting among the terminal B accesses terminal and the corresponding relation of authentication mode are as shown in table 1, terminal B can be according to the sign of the terminal A that obtains, in table 1, search the record (record 1) that the sign with terminal A is complementary, and then can to determine the authentication mode that terminal A is carried out access authentication be authentication mode 1.
In addition, terminal also can select corresponding other one or more sign correspondences that allow to access terminal to preset multiple authentication mode, so that terminal can be determined the multiple authentication mode that it is carried out access authentication according to certain sign that allows to access terminal.For instance, terminal B can correspondingly allow the sign of the terminal F of access to preset two kinds of authentication modes such as authentication mode 1 and authentication mode 4.When receiving the calling of terminal F, terminal B searches in the corresponding relation of sign that allowing of presetting accesses terminal and authentication mode, the authentication mode that terminal F is carried out access authentication be can find and authentication mode 1 and authentication mode 4 can be, terminal B can select wherein a kind of access authentication mode as the authentication mode of this access authentication, for example can select at random wherein a kind of access authentication mode (authentication mode 1 or authentication mode 4) as the authentication mode of this access authentication, being chosen in has at random increased uncertainty and unpredictability to a certain extent, is conducive to improve reliability; Or terminal B also can select corresponding all access authentication modes (authentication mode 1 and authentication mode 4) as the authentication mode of this access authentication, and being used in combination of multiple authentication mode can further improve reliability, by that analogy.
In addition, if terminal B does not find the record that the sign with terminal A is complementary in the corresponding relation of sign that allowing of presetting accesses terminal and authentication mode, then terminal B can finish conversation; Perhaps, this moment, terminal B also can determine, and the authentication mode that terminal A is carried out access authentication is the authentication mode (for example cipher authentication or other) of a certain acquiescence.Present embodiment has found the example that is recorded as that the sign with terminal A is complementary with terminal B and has described in the corresponding relation of sign that allowing of presetting accesses terminal and authentication mode.
205, terminal B sends authorization prompt message according to the authentication mode of determining to terminal A, and prompt terminal A provides corresponding authentication information.
206, terminal A receives this authorization prompt message, and sends authentication answer message according to this authorization prompt message to terminal B, wherein comprises corresponding authentication information.
207, the authentication answer message that sends of terminal B receiving terminal A, and carry out corresponding authentication processing according to the corresponding authentication information that wherein carries, if authentication is passed through, then execution in step 208, if authentification failure then can finish conversation.
Be appreciated that for different authentication modes terminal B may be not identical to the form that terminal A sends authorization prompt message with its content that comprises, terminal A also is not identical to the form of the authentication answer message that terminal B replys with its content that comprises certainly.
For instance, if the authentication mode that terminal B determines is the authentication of prompting problem, terminal B sends authorization prompt message to terminal A, comprises the prompting problem; Terminal A replys authentication answer message to terminal B, comprises the answer of this prompting problem; The answer that terminal B carries this authentication answer message and the corresponding answer of presetting compare, if consistent, then authentication is passed through, if inconsistent, authentification failure then.
Again for example, if the authentication mode that terminal B determines is pattern authentication, terminal B sends authorization prompt message to terminal A, comprises the prompting figure; Terminal A replys authentication answer message to terminal B, comprises the figure of replying of this prompting figure; Terminal B with this authentication answer message carry reply figure and the figure of replying that presets compares, if consistent, then authentication is passed through, if inconsistent, authentification failure then.
Again for example, if the authentication mode that terminal B determines is the speech recognition authentication, terminal B plays the suggestion voice that presets to terminal A; Terminal A replys to terminal B and replys voice; This is replied voice to terminal B and the respective acknowledgement voice that preset compare, if consistent, then authentication is passed through, if inconsistent, authentification failure then.
Again for example, if the authentication mode that terminal B determines is the recognition of face authentication, terminal B sends authorization prompt message to terminal A, and facial photo is taken and replied to prompting user; Terminal A replys authentication answer message to terminal B, comprises user's facial photo; The facial photo that terminal B carries this authentication answer message and the facial photo that presets compare, if similarity surpasses the threshold value set (90%, 99% or other value), then authentication is passed through, if similarity is lower than the threshold value of setting, then authentification failure.
Again for example, if the authentication mode that terminal B determines is the fingerprint recognition authentication, terminal B sends authorization prompt message to terminal A, and fingerprint is taken and replied to prompting user; Terminal A replys authentication answer message to terminal B, comprises user's fingerprint; The fingerprint that terminal B carries this authentication answer message and the fingerprint that presets compare, if similarity surpasses the threshold value set (95%, 99% or other value), then authentication is passed through, if similarity is lower than the threshold value of setting, then authentification failure.
For instance, if the authentication mode that terminal B determines is the authentication of prompting problem, terminal B sends authorization prompt message to terminal A, prompting input password; Terminal A replys authentication answer message to terminal B, comprises password; The password that terminal B carries this authentication answer message and the corresponding password that presets compare, if consistent, then authentication is passed through, if inconsistent, authentification failure then.
Be appreciated that with upper type only for illustrating, terminal B yet can adopt alternate manner that terminal A is carried out access authentication.
208, terminal B opens corresponding remote control terminal service to terminal A.
Further, if terminal B has disposed a plurality of remote control terminal services, then terminal B for example can select certain remote control terminal service by prompt terminal A, and opens the remote control terminal service of its selection to terminal A; Perhaps, terminal A can initiatively send and comprise the information that remote control terminal service is selected indication, and the remote control terminal service of its selection is opened in the selection indication of this remote control terminal service that terminal B then can send according to terminal A to terminal A; Perhaps, terminal B can open the remote control terminal service that its authority allows to terminal A according to the authority of the terminal A that presets, the invention is not restricted to aforesaid way.
Further, terminal A uses different remote control terminal services, and terminal B also can select different authentication modes that it is carried out access authentication.
For ease of better understanding and implementing, below by an instantiation such scheme of present embodiment is more specifically introduced.
For example, the remote terminal service control of terminal B configuration is long-range message service control, and terminal B supports the multiple authentication modes such as cipher authentication, pattern authentication, recognition of face authentication, fingerprint recognition authentication, speech recognition authentication, the authentication of prompting problem.
Terminal B presets allows the corresponding relation of the sign that accesses terminal and authentication mode as shown in table 2:
Table 2
Sequence number |
Allow the sign that accesses terminal |
Authentication mode |
1 |
13400000000 |
The authentication of prompting problem |
2 |
15900000000 |
Pattern authentication |
3 |
13000000000 |
Recognition of face |
The sign of terminal A for example is 13400000000, terminal A calling terminal B;
The calling of terminal B receiving terminal A, the sign 13400000000 of acquisition terminal A;
Terminal B searches the record that the sign 13400000000 with terminal A is complementary in the corresponding relation of sign that allowing of presetting accesses terminal and authentication mode, and then to determine the authentication mode that terminal A is carried out access authentication be the authentication of prompting problem;
Terminal B sends authorization prompt message to terminal A, for example comprise problem: how many piece birthmarks are arranged with it?
Terminal A replys authentication answer message to terminal B, for example comprises answer: 5
The corresponding answer of carrying in the authentication answer message that terminal B replys the terminal A that receives and the answer of presetting compare, if the two is consistent, then authenticates and pass through; If the two is inconsistent, authentification failure then.
For example the terminal B corresponding answer of presetting also is: 5, then authentication is passed through, and terminal B then opens long-range message service control to terminal A.
Further, for example can in terminal B, preset the problem-answer of many groups, when determining the authentication mode that terminal A is carried out access authentication and be the authentication of prompting problem, terminal B can select wherein one group of problem-answer of using as this authentication at random from preset the problem-answer of many groups, terminal A is carried out access authentication.
Other authentication mode by that analogy, repeats no more herein.
Therefore, the scheme of present embodiment presets each and allows the sign that accesses terminal and the corresponding relation of corresponding authentication mode in terminal called B, can realize that terminal called B is according to the difference of calling terminal, select suitable authentication mode that this calling terminal is carried out access authentication, be conducive to improve the flexibility of calling terminal being carried out access authentication, and the authentication mode with greater security can be provided.
Further, terminal called B can be configured to support the multiple authentication modes such as cipher authentication, pattern authentication, recognition of face authentication, fingerprint recognition authentication, speech recognition authentication, the authentication of prompting problem, can satisfy under the different application scene requirement to fail safe.
For ease of better implementing the technical scheme of the embodiment of the invention, the embodiment of the invention also provides a kind of terminal that disposes remote control terminal service.
Embodiment three
A kind of terminal 300 that disposes remote control terminal service referring to Fig. 3-a, the embodiment of the invention three can comprise: receive and obtain module 310, determination module 320 and access authentication module 330.
Wherein, receive and obtain module 310, be used for receiving the calling of calling terminal, obtain the sign of this calling terminal.
Under a kind of application scenarios, receiving the sign that obtains module 310 acquisition calling terminals can be MAC Address, IMSI, NAI etc.; Can certainly be can this terminal equipment of unique identification a label, for example device numbering or implementor name etc. are not done restriction herein.
Determination module 320 is used for the sign and the corresponding relation of authentication mode that access terminal according to receiving the sign that obtains the calling terminal that module 310 obtains and allowing of presetting, definite authentication mode that this calling terminal is carried out access authentication;
Access authentication module 330, the authentication mode that is used for determining according to determination module 320 carries out access authentication to above-mentioned calling terminal.
Under a kind of application scenarios, determination module 320 can comprise:
Search submodule, be used for allowing the tables of data of the corresponding relation of the sign that accesses terminal and authentication mode to search the record that the sign with above-mentioned calling terminal is complementary recording of presetting;
Determine submodule, be used for determining above-mentioned calling terminal is carried out the authentication mode of access authentication according to the lookup result of searching submodule.
Referring to Fig. 3-b, under a kind of application scenarios, access authentication module 330 can comprise:
Send submodule 331, the authentication mode that is used for determining according to determination module 320 sends corresponding authorization prompt message to above-mentioned calling terminal, points out it that corresponding authentication information is provided;
Receive submodule 332, be used for receiving the authentication answer message that comprises authentication information that calling terminal sends;
Authentication processing submodule 333, the authentication information that comprises for the authentication answer message of utilizing the reception submodule to receive carries out authentication processing.
Under a kind of application scenarios, the authentication mode that determination module 320 is determined can comprise:
Cipher authentication, pattern authentication, recognition of face authentication, fingerprint recognition authentication, speech recognition authentication, the authentication of prompting problem wherein one or more.
Access authentication module 330 for example can according to wherein one or more authentication modes of cipher authentication, pattern authentication, recognition of face authentication, fingerprint recognition authentication, speech recognition authentication, the authentication of prompting problem, be carried out access authentication to above-mentioned calling terminal.
After the access authentication of 330 pairs of calling terminals of access authentication module passed through, terminal 300 can be opened corresponding remote control terminal service to calling terminal.If the access authentication of 330 pairs of calling terminals of access authentication module does not pass through, terminal 300 can stop the conversation with calling terminal.
Be understandable that, present embodiment terminal 300 can be such as the terminal B in the above-mentioned embodiment of the method, the function of its each functional module can be according to the method specific implementation among the said method embodiment, and its specific implementation process can with reference to the associated description in above-described embodiment, repeat no more herein.
Therefore, the scheme of present embodiment presets each and allows the sign that accesses terminal and the corresponding relation of corresponding authentication mode in terminal 300 (terminal called), can realize that terminal called is according to the difference of calling terminal, select suitable authentication mode that this calling terminal is carried out access authentication, be conducive to improve the flexibility of calling terminal being carried out access authentication, and the authentication mode with greater security can be provided.
Further, terminal called can be configured to support the multiple authentication modes such as cipher authentication, pattern authentication, recognition of face authentication, fingerprint recognition authentication, speech recognition authentication, the authentication of prompting problem, can satisfy under the different application scene requirement to fail safe.
For ease of better implementing the technical scheme of the embodiment of the invention, the embodiment of the invention also provides a kind of communication system.
Embodiment four
A kind of communication system referring to Fig. 4, the embodiment of the invention four can comprise: first terminal 410 and the second terminal 420.
Wherein, first terminal 410 is used for making a call to the second terminal 420;
The second terminal 420 is used for receiving the calling of first terminal 410, obtains the sign of first terminal 410; The sign that accesses terminal according to the sign of first terminal 410 and allowing of presetting and the corresponding relation of authentication mode determine first terminal 410 is carried out the authentication mode of access authentication; According to the authentication mode of determining first terminal 410 is carried out access authentication; After the access authentication to first terminal 410 passes through, open remote control terminal service to first terminal 410.
Be understandable that the function of each entity of communication system of present embodiment can be according to the method specific implementation among the said method embodiment, its specific implementation process can with reference to the associated description in above-described embodiment, repeat no more herein.
Need to prove, for aforesaid each embodiment of the method, for simple description, so it all is expressed as a series of combination of actions, but those skilled in the art should know, the present invention is not subjected to the restriction of described sequence of movement, because according to the present invention, some step can adopt other orders or carry out simultaneously.Secondly, those skilled in the art also should know, the embodiment described in the specification all belongs to preferred embodiment, and related action and module might not be that the present invention is necessary.
In the above-described embodiments, the description of each embodiment is all emphasized particularly on different fields, do not have the part that describes in detail among certain embodiment, can be referring to the associated description of other embodiment.
To sum up, the scheme of the embodiment of the invention presets each and allows the sign that accesses terminal and the corresponding relation of corresponding authentication mode in terminal called, can realize that terminal called is according to the difference of calling terminal, select suitable authentication mode that this calling terminal is carried out access authentication, be conducive to improve the flexibility of calling terminal being carried out access authentication, and the authentication mode with greater security can be provided.
Further, terminal called can be configured to support the multiple authentication modes such as cipher authentication, pattern authentication, recognition of face authentication, fingerprint recognition authentication, speech recognition authentication, the authentication of prompting problem, can satisfy under the different application scene requirement to fail safe.
One of ordinary skill in the art will appreciate that all or part of step in the whole bag of tricks of above-described embodiment is to come the relevant hardware of instruction finish by program, this program can be stored in the computer-readable recording medium, and storage medium can comprise: read-only memory, random asccess memory, disk or CD etc.
More than the access authentication method of remote control terminal service that the embodiment of the invention is provided and relevant device and communication system be described in detail, used specific case herein principle of the present invention and execution mode are set forth, the explanation of above embodiment just is used for helping to understand method of the present invention and core concept thereof; Simultaneously, for one of ordinary skill in the art, according to thought of the present invention, all will change in specific embodiments and applications, to sum up, this description should not be construed as limitation of the present invention.