WO2013075380A1 - 动态口令的认证方法及*** - Google Patents
动态口令的认证方法及*** Download PDFInfo
- Publication number
- WO2013075380A1 WO2013075380A1 PCT/CN2011/084750 CN2011084750W WO2013075380A1 WO 2013075380 A1 WO2013075380 A1 WO 2013075380A1 CN 2011084750 W CN2011084750 W CN 2011084750W WO 2013075380 A1 WO2013075380 A1 WO 2013075380A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- information
- dynamic password
- intermediate information
- combined
- dynamic
- Prior art date
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/083—Network architectures or network communication protocols for network security for authentication of entities using passwords
- H04L63/0838—Network architectures or network communication protocols for network security for authentication of entities using passwords using one-time-passwords
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/31—User authentication
- G06F21/36—User authentication by graphic or iconic representation
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3226—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using a predetermined code, e.g. password, passphrase or PIN
- H04L9/3228—One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2103—Challenge-response
Definitions
- the present invention relates to the field of information security, and in particular to a method and system for authenticating a dynamic password.
- BACKGROUND OF THE INVENTION The full name of an OTP is a one-time password, also called a dynamic password. It is based on a special algorithm to generate an unpredictable random number combination.
- a password is used once and is widely used in online banking, online games, telecom operators, e-government, Application areas such as enterprises.
- Dynamic password token is a safe and convenient account anti-theft technology. For example, using the dynamic password token matched by the bank in the online transaction process can effectively protect the authentication security of transactions and logins, and the dynamic password does not need to change the password periodically. Heart, especially useful for internal applications of enterprises.
- Dynamic password is easy to maintain. Because the SMS gateway technology is very mature, the complexity and risk of the SMS password system are greatly reduced. The SMS customer service costs are low in the later stage. The stable system also enhances the security and creates a good reputation. This is also the current bank. The reason for adopting this technology is very important. Dynamic Password Tokens Currently, the most secure authentication method is the most widely used dynamic password token based on time synchronization. Generally, a 6-bit OTP password is generated every 60 seconds, and the OTP password is valid once. In the related art, the challenge response type dynamic password token is the most secure, but the usual challenge code is manually input, and manual input will inevitably generate errors, resulting in waste of time and cost.
- the authentication method for dynamic passwords of related technologies requires manual input of authentication data, which leads to problems of error in authentication results and high time and labor costs.
- a method for authenticating a dynamic password according to the related art requires manual input of authentication data, resulting in an error in the authentication result, and a high time and labor cost.
- the present invention has not been proposed yet, and the present invention is mainly The purpose is to provide a dynamic password authentication method and system to solve the above problems.
- a method for authenticating a dynamic password is provided.
- the method for authenticating a dynamic password includes: receiving, by a server, first information sent by a client, and generating a second according to the first information.
- the server sets each transmission bit of the second information to a corresponding brightness state or a color state, and obtains third information, and sends the third information to the client, where the third information includes : a blinking information of the pulsed light signal or image information of the dynamic pulsed light signal; the client converting the third information into a pulsed light signal output; the dynamic password device receiving and identifying the pulsed light signal, converting it to Intermediate information, the dynamic password device extracts part or all of the intermediate information and converts it into display information for viewing by a user and outputs the same; the dynamic password device receives trigger information, and generates a first dynamic password according to the intermediate information;
- the client receives the first dynamic password input by the user and sends the first dynamic password to the server; the server generates one or a group of second dynamic passwords according to the second information, and passes the Determining whether the first
- the server sets each transmission bit of the second information to a corresponding brightness state or a color state, and obtaining the third information includes: the server controlling each transmission in the second information according to the control signal. a brightness state or a color state in a predetermined area, obtaining flicker information of the pulsed light signal; or the server controlling a brightness state or color of each of the second bits of the second information in different regions according to the control signal State, obtaining image information of the dynamic pulsed light signal.
- the dynamic password device receives and recognizes the pulsed optical signal, and converting it into intermediate information includes: A. acquiring the pulsed optical signal in a predetermined output region; B. receiving and identifying the pulsed optical signal One byte of data; C.
- the dynamic password device receives and recognizes the pulsed optical signal, and converting it into intermediate information comprises: acquiring the pulsed optical signal in a predetermined output region; receiving and identifying all bytes in the pulsed optical signal Data; combining all the byte data representing the header information with its subsequent preset number of section data to obtain all the combined intermediate information; combining all of the combined intermediate information to generate intermediate information.
- the dynamic password device determines whether all the combined intermediate information received are correct within a preset time; if the receiving is determined within a preset time All the combined intermediate information is correct, and all the combined intermediate information are combined to generate intermediate information; if it is determined within the preset time that all the combined intermediate information received is incorrect, the dynamic password device outputs an error message.
- determining, by the dynamic password device, whether all the combined intermediate information received are correct in a preset time comprises: determining, by the dynamic password device, whether the received combined intermediate information is correct; If the combined intermediate information is correct, the dynamic password device determines whether all the combined intermediate information that has been correctly determined has been received; if all the combined intermediate information that determines the correctness are received, the dynamic password device corrects all the determinations.
- the combined intermediate information is combined; if all the combined intermediate information that is judged to be correct is not received, B is returned; if the combined intermediate information is incorrect, it is determined whether a preset time is reached, such as reaching a preset time, the dynamic The password device outputs an error message, and if it does not reach the preset time, it returns B.
- the dynamic password device determines whether all the combined intermediate information received are correct within a preset time; if the receiving is determined within a preset time All the combined intermediate information is correct, and all the combined intermediate information are combined to generate intermediate information; if it is determined within the preset time that all the combined intermediate information received is incorrect, the dynamic password device outputs an error message; The dynamic password device determines whether all the combined intermediate information received are correct within a preset time: a. The dynamic password device sequentially determines whether all the combined intermediate information are correct; if each group of combined intermediate information is correct, the execution b; if at least one set of combined intermediate information is incorrect, perform c; b.
- the dynamic password device combines all combined intermediate information to generate intermediate information; c.
- the dynamic password device determines whether a preset time is reached, such as reaching a pre- Set the time, then output an error message, if the preset is not reached Room continues to receive the information that is not through the intermediate composition determination is performed a. Further, the dynamic password device receives the trigger information, and the generating the first dynamic password according to the intermediate information includes: performing an encryption operation on the intermediate information and a pre-stored first static factor to obtain the first dynamic password; or Encrypting the intermediate information, the additional dynamic factor, and the pre-stored first static factor to obtain the first dynamic password.
- generating the second information according to the first information includes: extracting preset information in the first information, using the preset information as the second information; or extracting a preset in the first information Setting information, adding additional information to the preset information to generate the second information; or directly using the first information as the second information.
- the method for authenticating a dynamic password includes: receiving, by a server, first information sent by a client, and generating, according to the first information Transmitting, by the server, the second information to the client, the client receiving the second information, and setting each transmission bit in the second information to a corresponding brightness state or color a third information, where the third information includes: flicker information of a pulsed optical signal or image information of a dynamic pulsed optical signal; the client converts the third information into a pulsed optical signal output; The device receives and recognizes the pulsed optical signal and converts it into intermediate information, and the dynamic password device extracts part or all of the intermediate information and converts it into display information for viewing by the user and outputs the same; the dynamic password device receives the trigger information.
- the server Generating a first dynamic password according to the intermediate information; the client receiving the user input Dynamic password And sending the first dynamic password to the server; the server generates one or a set of second dynamic passwords according to the second information, and verifies the first by the one or a group of second dynamic passwords Whether a dynamic password is legal; if the first dynamic password is the same as any one of the second dynamic password or a second dynamic password, verifying that the first dynamic password is legal; The first dynamic password is different from any one of the second dynamic password or the second dynamic password, and the first dynamic password is verified to be invalid.
- the client receives the second information, and sets each of the second information to a corresponding brightness state or a color state, to obtain third information, including: the client receiving After the second information, controlling, according to the control signal, a brightness state or a color state of each of the second information in the predetermined area to obtain blinking information of the pulsed optical signal; or receiving by the client After the second information, the brightness state or the color state of each of the second bits in the second information is controlled according to the control signal, and the image information of the dynamic pulse light signal is obtained.
- the dynamic password device receives and recognizes the pulsed optical signal and converts it into intermediate information, including: A. acquiring the pulsed optical signal in a predetermined output region; B.
- the dynamic password device receives and recognizes the pulsed optical signal and converts it into intermediate information, including: acquiring the pulsed optical signal in a predetermined output region; receiving and identifying all words in the pulsed optical signal Section data; combining all the byte data representing the header information with its subsequent preset number of section data to obtain all the combined intermediate information; combining all the combined intermediate information to generate intermediate information.
- the dynamic password device determines whether all the combined intermediate information received are correct within a preset time; if the receiving is determined within a preset time All the combined intermediate information is correct, and all the combined intermediate information are combined to generate intermediate information; if it is determined within the preset time that all the combined intermediate information received is incorrect, the dynamic password device outputs an error message.
- the dynamic password device determines whether the received combined intermediate information is correct; if the combined intermediate information is correct, the dynamic The password device determines whether all of the correct combination intermediate information has been received; if all of the correct combination intermediate information is received, the dynamic password device combines all the correct combination intermediate information; if not received All the judgments mentioned are correct Group If the combined intermediate information is incorrect, it is determined whether the preset time is reached. If the preset time is reached, the dynamic password device outputs an error message, and if the preset time has not been reached, the B is returned.
- the dynamic password device determines whether all the combined intermediate information received are correct within a preset time; if the receiving is determined within a preset time All the combined intermediate information is correct, and all the combined intermediate information are combined to generate intermediate information; if it is determined within the preset time that all the combined intermediate information received is incorrect, the dynamic password device outputs an error message; The dynamic password device determines whether all the combined intermediate information received are correct within a preset time: a. The dynamic password device sequentially determines whether all the combined intermediate information are correct; if each group of combined intermediate information is correct, the execution b; if at least one combination intermediate information is incorrect, perform c; b.
- the dynamic password device combines all combined intermediate information to generate intermediate information; c.
- the dynamic password device determines whether a preset time is reached, such as reaching a pre- Set the time, then output an error message, if the preset is not reached Room continues to receive the information that is not through the intermediate composition determination is performed a. Further, the dynamic password device receives the trigger information, and the generating the first dynamic password according to the intermediate information includes: performing an encryption operation on the intermediate information and a pre-stored first static factor to obtain the first dynamic password; or Encrypting the intermediate information, the additional dynamic factor, and the first static factor stored in advance to obtain the first dynamic password.
- generating the second information according to the first information includes: extracting preset information in the first information, using the preset information as the second information; or extracting a preset in the first information Setting information, adding additional information to the preset information to generate the second information; or directly using the first information as the second information.
- the method for authenticating a dynamic password includes: a client receiving first information, and generating second information according to the first information; The client sets each transmission bit of the second information to a corresponding brightness state or color state to obtain third information, where the third information includes: a blinking information of a pulsed light signal or an image of a dynamic pulsed light signal Information: the client converts the third information into a pulsed optical signal output; the dynamic password device receives the pulsed optical signal, converts it into intermediate information, and the dynamic password device extracts part or all of the intermediate information and Converting it into display information for viewing by the user and outputting; the dynamic password device receives the trigger information, and generates a first dynamic password according to the intermediate information; the client receives the first dynamic password input by the user and Transmitting the first dynamic password and the second information to the server; the server according to the second Generating one or a set of second dynamic passwords, and verifying whether the first dynamic password is legal by the one or a set of second dynamic passwords; if the first dynamic password and the
- the client sets each transmission bit in the second information to a corresponding brightness state or a color state, and obtaining the third information includes: the client controlling each of the second information according to the control signal.
- the brightness state or the color state of the transmission bit in the predetermined area obtaining the flicker information of the pulsed optical signal; or the client controlling the brightness of each of the second information in the different area according to the control signal
- the state or color state obtains image information of the dynamic pulsed light signal.
- the dynamic password device receiving the pulsed optical signal and converting it into intermediate information comprises: ⁇ '. acquiring the pulsed optical signal in a predetermined output region; ⁇ '. receiving and identifying the pulsed optical signal One byte of data; C.
- the receiving, by the dynamic password device, the pulsed optical signal and converting it into intermediate information comprises: acquiring the pulsed optical signal in a predetermined output area; receiving and identifying all byte data in the pulsed optical signal; Combining all the byte data representing the header information with its subsequent preset digital section data to obtain all the combined intermediate information; combining all the combined intermediate information to generate intermediate information.
- the dynamic password device determines whether all the combined intermediate information received are correct within a preset time; if the receiving is determined within a preset time All the combined intermediate information is correct, and all the combined intermediate information are combined to generate intermediate information; if it is determined within the preset time that all the combined intermediate information received is incorrect, the dynamic password device outputs an error message.
- the dynamic password device determines whether the received combined intermediate information is correct; if the combined intermediate information is correct, the dynamic The password device determines whether all the combined intermediate information for determining the correctness has been received; if all the combined intermediate information for determining the correctness are received, the dynamic password device combines all the combined intermediate information that correctly determines the correctness; Received all the judgments correctly Combine the intermediate information, return ⁇ '; if the combined intermediate information is incorrect, determine whether the preset time is reached, if the preset time is reached, the dynamic password device outputs an error message, if the preset time is not reached, return ⁇ ' .
- the dynamic password device determines whether all the combined intermediate information received are correct within a preset time; All the combined intermediate information received in the time is determined to be correct, and all the combined intermediate information are combined to generate intermediate information; if it is determined in the preset time that all the combined intermediate information received is incorrect, the dynamic password The device outputs error information; the dynamic password device determines whether all the combined intermediate information received are correct within a preset time: a'.
- the dynamic password device sequentially determines whether all the combined intermediate information are correct; if each combination is The intermediate information is correct, and b' is executed ; if at least one set of combined intermediate information is incorrect, c' ; b' is executed.
- the dynamic password device combines all the combined intermediate information to generate combined intermediate information; c'.
- the dynamic password device determines whether the preset time has elapsed. If the preset time is reached, an error message is output. If the preset time has not been reached, the remaining combined intermediate information that fails the judgment is continuously received, and a' is executed. Further, the dynamic password device receives the trigger information, and the generating the first dynamic password according to the intermediate information includes: performing an encryption operation on the intermediate information and a pre-stored first static factor to obtain the first dynamic password; or Encrypting the intermediate information, the additional dynamic factor, and the first static factor stored in advance to obtain the first dynamic password.
- generating the second information according to the first information includes: extracting preset information in the first information, using the preset information as the second information; or extracting a preset in the first information Setting information, adding additional information to the preset information to generate the second information; or directly using the first information as the second information.
- a dynamic password authentication system comprising: a server, a client, and a dynamic password device; wherein the server is configured to receive the client Transmitting the first information and the first dynamic password, generating second information according to the first information, and setting each transmission bit of the second information to a corresponding brightness state or a color state, to obtain third information, Sending the third information to the client, and generating one or a set of second dynamic passwords according to the second information, and verifying the first dynamic by using the one or a group of second dynamic passwords Whether the password is legal; the client is configured to send the first information and the first dynamic password to the server, and receive the third information sent by the server, and convert the third information into a pulse
- the optical signal device is configured to receive the pulsed optical signal and trigger information output by the client, and the optical signal is Identifying and converting it into intermediate information, generating the first dynamic password according to the intermediate information, and after extracting some or all
- a dynamic password authentication system comprising: a server, a client, and a dynamic password device; wherein the server is configured to receive the The first information sent by the client and the first dynamic password, generating second information according to the first information, and generating one or a set of second dynamic passwords according to the second information, by using the one or a group of second Dynamic port Determining whether the first dynamic password is legal, and sending the second information to the client; the client is configured to send the first information and the first dynamic password to the server, And receiving the second information sent by the server, setting each transmission bit in the second information to a corresponding brightness state or a color state, obtaining third information, and converting the third information into a pulse optical signal Outputting; the dynamic password device is configured to receive the pulsed optical signal and trigger information output by the client, identify the pulsed optical signal, and convert it into intermediate information, and generate the first information according to the intermediate information.
- a dynamic password authentication system comprising: a server, a client, and a dynamic password device; wherein the server is configured to receive the Transmitting, by the client, the first dynamic password and the second information, generating one or a set of second dynamic passwords according to the second information, and verifying, by the one or a group of second dynamic passwords, whether the first dynamic password is
- the client is configured to receive the first information and the first dynamic password input by the user, generate the second information according to the first information, and use the second information and the first dynamic Sending a password to the server, and setting each transmission bit of the second information to a corresponding brightness state or color state, and after obtaining the third information, converting the third information into a pulsed optical signal output;
- the dynamic password device configured to receive the first information and the first dynamic password input by the user, generate the second information according to the first information, and use the second information and the first dynamic Sending a password to the server, and setting each transmission bit of the second information to a corresponding brightness state or color state, and after
- the server receives the first information sent by the client, and generates the second information according to the first information; the server sets each of the second information to a corresponding brightness state or color state.
- the client converts the third information into a pulsed light signal output; and the dynamic password device receives the pulse
- the dynamic password device extracts part or all of the intermediate information and converts it into display information for viewing by the user; the dynamic password device receives the trigger information, and generates the first information according to the intermediate information.
- the client receives the first dynamic password input by a user and sends the first dynamic password to the Determining, by the server, one or a set of second dynamic passwords according to the second information, and verifying, by the one or a group of second dynamic passwords, whether the first dynamic password is legal; Perform user actions with the dynamic password correct.
- the authentication method for the dynamic password related to the prior art is required to manually input the number of authentications. According to this, the certification result is error-prone, and the time and labor costs are high, thereby reducing the cost and improving the security of the authentication.
- FIG. 1 is a schematic diagram of signal transmission of a dynamic password authentication system according to Embodiment 1 of the present invention
- FIG. 2 is a schematic diagram of signal transmission of a dynamic password authentication system according to Embodiment 2 of the present invention
- FIG. 4 is a flowchart of a method for authenticating a dynamic password shown in FIG. 3
- FIG. 5 is another method for authenticating a dynamic password shown in FIG. FIG.
- FIG. 6 is a flowchart of a method for authenticating a dynamic password according to Embodiment 4 of the present invention
- FIG. 7 is a flowchart of a method for authenticating a dynamic password shown in FIG. 6.
- FIG. 9a-9h are schematic diagrams of seven output color blocks in the embodiment shown in FIG. 3-5 or FIG. 6-8
- FIG. 10 is a dynamic diagram of Embodiment 1 of the present invention
- FIG. 11 is a schematic diagram of a system for dynamic password authentication according to Embodiment 2 of the present invention
- FIG. 12 is a schematic diagram of a system for dynamic password authentication according to Embodiment 3 of the present invention.
- Embodiment 1 Figure la-lb is a schematic structural diagram of a dynamic password authentication system according to Embodiment 1 of the present invention.
- the dynamic password authentication system includes: a server 2, configured to receive first information sent by the client 1, generate second information according to the first information, and set each transmission bit in the second information to correspond The brightness state or the color state is obtained to obtain the third information, where the third information includes: a flicker information of the pulsed light signal or image information of the dynamic pulsed light signal; the client 1 is configured to receive the first information and send the first information to a server, and converting the third information received from the server 2 into a pulsed optical signal and outputting; the dynamic password device 3 is configured to receive the pulsed optical signal, convert the received pulsed optical signal into intermediate information, and extract part or all of the middle And converting the information into display information for viewing by the user, and generating a first dynamic password according to the intermediate information; wherein, the client 1 receives the first dynamic password input by the user and forwards it to the server 2, and the server 2 verifies Whether the first dynamic password is legal, and in the case where the first dynamic password is legal, the server 2 performs a user operation.
- the third information
- the server 2 converts the user information into a pulsed optical signal according to a predetermined conversion manner, and sends the signal to the client 1; the client 1 outputs a pulsed optical signal; the dynamic password device 3 collects the pulsed optical signal, generates a dynamic password, and generates the dynamic The password is sent to server 2 for verification.
- the dynamic password authentication system includes: a server 2, configured to receive first information sent by the client 1, generate second information according to the first information, and send the second information to the client 1;
- the terminal 1 is configured to receive the first information and send the first information to the server, and set each of the second information received from the server 2 to a corresponding brightness state or a color state to obtain a third information.
- the third information includes: flicker information of the pulsed light signal or image information of the dynamic pulsed light signal, converting the third information into a pulsed light signal and outputting;
- the dynamic password device 3 is configured to receive the pulsed light signal, and receive the pulse Converting the optical signal into intermediate information, extracting part or all of the intermediate information and converting it into display information for viewing by the user, and generating a first dynamic password according to the intermediate information; wherein, the client 1 receives the first dynamic input by the user The password is forwarded to the server 2, and the server 2 verifies whether the first dynamic password is legal, in the case where the first dynamic password is legal Next, the server 2 performs a user operation.
- the client 1 transmits the user information to the server 2, the server 2 converts the user information into the second information and returns the second information to the client 1; the client 1 according to the reservation The conversion mode converts the second information into a pulsed light signal and outputs the pulsed light signal; the dynamic password device 3 collects the pulsed light signal, generates a dynamic password, and sends the dynamic password to the server 2 for verification.
- the above embodiment transmits the related user information to the dynamic password device 3 by using the transmission method of the non-wired connection, thereby reducing the manual input in the related art and increasing the transmission efficiency of a large amount of information.
- the client 1 transmits the related user information to the dynamic password device 3 through a non-connected transmission method and generates a corresponding dynamic password, and the dynamic password is used for the server. 2 generated dynamic passwords for comparison, with higher security.
- the server 2 The first signal processing is performed, and the client 1 is more of a forwarding function.
- the dynamic password device 3 in the present invention requires user information as a change factor to participate in generating a dynamic password.
- FIG. 2 is a schematic structural diagram of a dynamic password authentication system according to Embodiment 2 of the present invention.
- the authentication system of the dynamic password may be another implementation manner.
- the system includes: a client 1 configured to receive first information, generate second information according to the first information, and generate the second information.
- Each of the transmission bits is set to a corresponding brightness state or color state, and the third information is obtained.
- the third information includes: flicker information of the pulsed light signal or image information of the dynamic pulsed light signal;
- the dynamic password device 3 is configured to receive Pulse the optical signal, and convert it into intermediate information, extract some or all of the intermediate information and convert it into display information for the user to view and output, and return the first dynamic password generated according to the intermediate information to the client 1;
- the client 1 receives the first dynamic password input by the user and forwards it to the server 2, and the server 2 verifies whether the first dynamic password is legal. In the case where the first dynamic password is legal, the server 2 performs a user operation.
- the related user information is transmitted to the dynamic password device 3 by using a non-wired connection transmission method, thereby reducing manual input and increasing a large amount of information in the related art. Transmission efficiency.
- the related user information is transmitted to the dynamic password device 3 through a non-connected transmission method, and a corresponding dynamic password is generated, and the dynamic password is used for generating with the server 2.
- Dynamic passwords are compared for greater security.
- the dynamic password device 3 of the present invention requires user information as a change factor to participate in generating a dynamic password.
- the client 1 in the second embodiment of the present invention completes the conversion process of the first information. Compared with the first embodiment, the workload of the server 2 is reduced, and the working efficiency is relatively improved.
- FIG. 3 is a schematic flowchart of a method for authenticating a dynamic password according to Embodiment 3 of the present invention.
- the method includes the following steps: Step S10: The server 2 receives the first information sent by the client 1, and according to The first information generates second information.
- Step S30 the server 2 sets each transmission bit of the second information to a corresponding brightness state or color state, obtains third information, and sends the third information to the client 1, the third information includes: blinking information of the pulsed light signal Or the image information of the dynamic pulsed light signal; or the server 2 sends the second information to the client 1, the client 1 receives the second information, and sets each of the second information to a corresponding brightness state or color state, The third information is obtained.
- the third information includes: flicker information of the pulsed optical signal or image information of the dynamic pulsed optical signal.
- the client 1 converts the third information into a pulsed optical signal output.
- Step S70 When the dynamic password device 3 receives the pulsed light signal, it converts it into intermediate information, and the dynamic password device 3 extracts part or all of the intermediate information and converts it into display information for the user to view.
- Step S90 The dynamic password device 3 receives the trigger information, and generates a first dynamic password according to the intermediate information.
- the client 1 receives the first dynamic password input by the user and sends the first dynamic password to the server 2.
- Step S130 the server 2 generates one or a set of second dynamic passwords according to the second information, and verifies whether the first dynamic password is legal by one or a set of second dynamic passwords; if the first dynamic password and a second dynamic password or The second dynamic password is the same as any one of the second dynamic passwords, and the first dynamic password is verified to be valid; if the first dynamic password is different from any of the second dynamic password or a second dynamic password, the verification is performed.
- the first dynamic password is not valid.
- the dynamic password authentication method of the above embodiment of the present invention transmits related user information to the dynamic password device 3 by using a non-wired connection transmission method, thereby reducing manual input in the related art and increasing transmission efficiency of a large amount of information. .
- the client 1 transmits the related user information to the dynamic password device 3 through a non-connected transmission method and generates a corresponding dynamic password, and the dynamic password is used for the same server. 2 generated dynamic passwords for comparison, with higher security.
- the processing of the first signal is performed on the server 2 side, and the client 1 is more capable of forwarding.
- the dynamic password device 3 in the present invention requires user information as a change factor to participate in generating a dynamic password.
- the server 2 sets each transmission bit of the second information to a corresponding brightness state, and obtains the third information, which specifically includes: the server 2 controls the second information according to the control signal.
- Pulsed light signal obtained by the brightness state or color state or color state of each transmission bit in a predetermined area The blinking information of the number; or the server 2 controls the brightness state of each of the transmission bits in the second information according to the control signal to obtain image information of the dynamic pulsed light signal.
- the step of converting it into intermediate information may include: A. acquiring the pulsed optical signal in a predetermined output region; B.
- FIG. 4 is a schematic flow chart of a method for implementing dynamic password authentication according to FIG. As shown in FIG. 4, the method for generating a detailed dynamic password is provided in this embodiment, which specifically includes the following steps.
- Step 101 The server 2 receives the first information sent by the client 1, and generates a second according to the first information.
- the first information in this embodiment includes a user identification code, account information, an amount, and additional information; the user identification code is used to identify the identity of the user, and may be modified by the user; the additional information is a set of information input by the user.
- the server 2 generates the second information according to the first information, where the server 2 extracts the preset information from the first information according to a pre-agreed method, according to the preset.
- Amount ⁇ /k> ⁇ v>45600 ⁇ /v> ⁇ /M> ⁇ /Ex>T>
- the first information may also include time, location, password, etc. as preset data.
- the server 2 may use the preset information as the second information, or may not extract the preset information, and directly use the first information as the second information; or add other information based on the preset information to generate the second information.
- the server 2 extracts preset information and adds additional information as the second information.
- the second information generated by the server 2 is: a user identifier: 123456; an account information: 11112222; an amount: 45600; additional information: 654321; the server 2 separately converts each information in the second information, and forms the data.
- the general package is as follows: a0 7 31 32 33 34 35 36 0 al 9 31 31 31 31 32 32 32 32 9 a2 6 34 35 36 30 30 22 a3 7 36 35 34 33 32 31 22
- the data package includes a0, al , a2, a3 respectively represent the header information of each data packet, and according to the header information, it can be determined that the data of the group has been received.
- the header information can also be represented by characters that are not usable in other ASCII tables, which avoids confusion with the transmitted byte data.
- Step 102 The server 2 processes the second information to obtain the third information, and sends the third information to the client 1; the above step 102 may also be replaced by: the server 2 sends the second information to the client 1, the client 1 processing the second information to obtain the third information; the method for the client 1 to process the second information to obtain the third information and the server 2 to process the second information, the method for obtaining the third information is the same.
- Step 103 The client 1 converts the third information into a pulsed light signal output;
- Step 104 The dynamic password device 3 collects the pulsed light signal, performs preset processing on the pulsed light signal to convert into intermediate information, and determines whether the intermediate information is correct;
- the dynamic password device judges the received intermediate information within a preset time; if yes, step 105 is performed; if not, step 111 is performed; preferably, the dynamic password device 3 receives the pulsed optical signal through the photosensitive element
- the photosensitive element located on the dynamic password device 3 may be one or more. When the photosensitive element is plural, the arrangement may be: one line arrangement, matrix arrangement, circumferential arrangement, and the like.
- Step 105 The dynamic password converts the combined intermediate information into the fourth information, and outputs the fourth information.
- the dynamic password extracts part or all of the information in the intermediate information, and converts the information into a decimal value as the fourth information.
- the fourth information is display information that is convenient for the user to view. It should be noted that, in this embodiment, the fourth information includes the user identifier, account information, amount, and additional information of the user.
- the step 106 the dynamic password device 3 determines whether the confirmation information input by the user is received within the preset time; if yes, step 107 is performed; if not, step 111 is performed; preferably, in step 106 of the embodiment The preset time is 60 seconds.
- Step 107 The dynamic password device 3 receives the confirmation information of the user, generates the first dynamic password according to the intermediate information, and outputs the first dynamic password.
- the method for generating the dynamic password by the dynamic password device 3 may be: As a first dynamic factor, the first dynamic factor and the pre-stored first static factor are encrypted by a built-in algorithm to generate a first dynamic password, and the first dynamic password is output; and the dynamic password device 3 generates a dynamic password.
- the dynamic password device 3 may use the intermediate information as the first dynamic factor, and use a built-in algorithm to encrypt the first dynamic factor, the current time factor (or the number factor), and the pre-stored first static factor to generate the first Dynamic password, and output the first dynamic password;
- the method for generating the second dynamic password by the server 2 is the same as the method for generating the first dynamic password by the dynamic password device 3 in step 107.
- the server 2 uses the built-in second information as the second dynamic factor.
- the second dynamic factor and the pre-stored second static factor are encrypted by a built-in algorithm to generate a second dynamic password.
- the server 2 pre-stores the second static factor as the first static factor in the dynamic password device 3.
- Step 110 The server 2 verifies whether the second dynamic password is the same as the first dynamic password sent by the client 1; if yes, performs a user operation; if not, proceeds to step 112;
- Step 112 The server 2 sends a message prompting the dynamic password error to the client 1, and the client 1 outputs the error message.
- step 112 may also perform the following operations:
- the server 2 sends a message prompting the dynamic password error to the client 1, and the client 1 prompts the user to re-enter the dynamic password.
- the second dynamic password may also record the generation time of the pulsed optical signal in step 102, and accordingly, after generating the second dynamic password, the server 2 generates the time according to the first dynamic password and the generation of the pulsed optical signal. Calculate the time difference to determine whether the time difference is within a preset time difference; if yes, execute step 110; otherwise, execute step 111.
- FIG. 5 is a schematic flow chart of another method for implementing dynamic password authentication according to FIG. As shown in FIG.
- Step 201 The server 2 receives the first information sent by the client 1, and generates second information according to the first information.
- the first information in this embodiment includes a user identification code, account information, an amount, and additional information; the user personal identification code is used to identify the identity of the user, and may be modified by the user; the additional information is a set of information input by the user.
- the server 2 may be a combination of characters of any length.
- the server 2 extracts preset information from the first information according to a pre-agreed method, and generates second information according to the preset information.
- the server 2 may use the preset information as the second information, or may not extract the preset information, and directly use the first information as the second information; or add other information based on the preset information to generate the second information.
- the server 2 extracts preset information and adds additional information as the second information.
- the second information generated by the server 2 is: user identifier: 123456; account information: 11112222; amount: 45600; additional information: 654321; the second information may also include the first challenge code generated by the server 2;
- the information in the second information is separately packet-converted, and the formed data package is as follows: a0 7 31 32 33 34 35 36 0 al 9 31 31 31 31 32 32 32 32 9 a2 6 34 35 36 30 30 22 a3 7 36 35 34 33 32 31 22
- a0, al, a2, and a3 respectively represent the header information of each data packet, and according to the header information, it can be judged that the data of the group has been received.
- the header information can also be represented by characters that are not usable in other ASCII tables, which avoids confusion with the transmitted byte data.
- Step 202 The server 2 processes the second information to obtain the third information, and sends the third information to the client 1; the foregoing step 202 may also be replaced by: the server 2 sends the second information to the client 1, the client 1 processing the second information to obtain the third information; the method for the client 1 to process the second information to obtain the third information is the same as the method for the server 2 to process the second information to obtain the third information.
- the specific implementation process of the step 202 in this embodiment is the same as the step 102 in the embodiment 1. The details are not described herein again.
- Step 203 The client 1 converts the third information into a form of a pulsed optical signal.
- the specific implementation process of the step 203 in this embodiment is the same as the step 103 in the embodiment 1.
- the dynamic password device 3 collects the pulsed light signal, performs preset processing on the pulsed light signal to convert into intermediate information, and determines whether the intermediate information is correct or not.
- the dynamic password device 3 collects a pulsed optical signal, performs a preset processing on the pulsed optical signal, converts it into intermediate information, and determines whether the intermediate information is correct. No further details are provided herein; 3 The method of collecting the pulsed light signal, performing the preset processing on the pulsed light signal to convert into the intermediate information, and determining whether the intermediate information is correct is the same as the dynamic password device 3 in step 104 in the first embodiment.
- Step 205 The dynamic password device converts the combined intermediate information into the fourth information, and outputs the fourth information. Specifically, the dynamic password device extracts part or all of the information in the intermediate information, and converts the information into a decimal value as the fourth information.
- the fourth information is display information that is convenient for the user to view. It should be noted that, in this embodiment, the fourth information includes the user identifier, account information, amount, and additional information of the user.
- Step 206 The dynamic password device 3 determines whether the confirmation information input by the user is received within the preset time; if yes, step 207 is performed; if not, step 211 is performed; preferably, in step 206 of the embodiment, Set the time to 60 seconds.
- Step 207 The dynamic password device 3 receives the confirmation information of the user, generates a third dynamic password according to the intermediate information, and outputs a third dynamic password.
- the method for generating the dynamic password by the dynamic password device 3 may be: The information is used as a first dynamic factor, and the first dynamic factor, the first additional dynamic factor, and the pre-stored first static factor are encrypted by using a built-in algorithm to generate a third dynamic password, and the third dynamic password is output;
- the first additional dynamic factor may be one of a time factor and a time factor.
- the first additional dynamic factor may also be the first
- the challenge value may also be a combination of the first challenge value and the time factor (the number factor); in this embodiment, the first challenge value is generated by the server 2 and sent to the client 1 along with the second information, the client 1 The first challenge value is output in the form of a pulsed optical signal.
- the method for the server 2 to generate the first dynamic password is the same as the method for the dynamic password device 3 to generate the third dynamic password in step 207.
- the server 2 uses the built-in second information as the second dynamic factor. Adding or subtracting according to a second additional dynamic factor within a predetermined range, and performing a cryptographic operation on the second dynamic factor, the second additional dynamic factor, and the pre-stored second static factor by using a built-in algorithm to generate a first set of dynamic passwords;
- the method for generating the dynamic password by the dynamic password device 3 may also be:
- the dynamic password device 3 uses the intermediate information as the first dynamic factor, and adopts a built-in algorithm for the first dynamic factor, the current time factor (the number of times factor), and the first static stored in advance.
- the factor performs an encryption operation, generates a first dynamic password, and outputs the first dynamic password;
- the second additional dynamic factor is the same as the first additional dynamic factor used in generating the third dynamic password, and the server 2 pre-stores the second static factor and the dynamic
- the first static factor in the password device 3 is the same.
- the dynamic password device 3 outputs an error message, and stops the operation;
- Step 212 The server 2 sends a message prompting the dynamic password error to the client 1, and the client 1 outputs the error message.
- step 212 may also perform the following operations:
- the server 2 sends a message prompting the dynamic password error to the client 1, and the client 1 prompts the user to re-enter the dynamic password.
- Step 102 The server 2 processes the second information to obtain the third information, and the third The information is sent to the client 1; the first method for the server 2 to process the second information includes: the server 2 performs mapping processing on each bit of the second information through a pre-agreed data processing mode, and is processed by the server 2
- the control information control client 1 outputs different brightness states according to different transmission bits in the output area; For example: when the transmission bit is "1", the server 2 controls the state of the output of the client 1 to be the first brightness, and when the transmission bit is "0", the server 2 controls the state of the output of the client 1 to be the second brightness;
- the third information includes the second information and the control information; the control information is used to control the flicker of the pulsed optical signal.
- the second method for processing the second information by the server 2 specifically includes: the server 2 maps the second information to be transmitted into a dynamic pulse optical signal according to a predetermined data processing mode, and presets different brightness states according to different transmission bits.
- Image for example: When the transmission bit is "1", the server 2 controls the state of the color block output corresponding to the dynamic pulse light signal image to be the first brightness, and when the transmission bit is "0", the server 2 controls the dynamic pulse light signal image.
- the state of the corresponding patch output is the second brightness; the server 2 maps the second information to be transmitted into a dynamic pulsed light signal image according to the difference of the transmission bits.
- the format of the dynamic pulse optical signal image may be a variety of dynamic image formats such as GIF; specifically, the dynamic pulse optical signal image mapped by the server 2 is divided into two forms: The first form is a dynamic pulse optical signal image. Only a single luminance patch is included: The data in the second information is output as a serial output. In order to distinguish the data of each byte from the start of output and output, the server 2 will process the data in the dynamic pulse optical signal according to a predetermined method.
- the serial output flashing process also includes an output start command and an end command;
- the start command represents one byte of data to start outputting, and starts outputting data after the start of the start command, and the end command represents the output of the byte data;
- the start command and The end command is set in the same way as the server 2 and the dynamic password device 3 agree.
- the second form is a dynamic pulse optical signal image comprising a plurality of luminance patches; the plurality of patches includes two portions, a control patch and a data output patch; wherein, when the control patch is a clock signal patch, the function is Is to control the output synchronization of the data output color block, and control one (group) data when the rising edge (falling edge) of the clock; in order to distinguish the data of each byte from the start of output and output, the server 2 according to the predetermined method,
- the data output patch outputs a (group) data during the blinking process (in the process of clock signal patch output clock signal), and also includes an output start command and an end command; the start command represents one byte of data to start outputting, and the start command After the end, the data is output, and the end instruction represents the data output of the byte.
- the data output is four-bit parallel transmission, only the upper four bits of one byte are output at the falling (rising) edge of the clock signal, and the clock signal rises ( Decrease) output the lower four bits along the time to achieve technical effect; if the data The output is an 8-bit parallel transmission. It only needs to output one byte of data at the same time as the falling (rising) edge of the clock signal to achieve the technical effect.
- the function of the differential signal color block is respectively The first brightness and the second brightness are sampled to set and output a critical brightness value when the screen brightness of the client 1 is different; the server 2 according to a predetermined method, when the output state brightness is higher than (below) the critical brightness value , the output state is regarded as "first brightness”, below (higher than) the critical brightness value, the output state is regarded as "second brightness”, and below the critical brightness value, the output state is regarded as "first brightness value”;
- the signal color block enables the dynamic password device 3 to more accurately receive and recognize the state of the optical signal when the client 1 screen is very dark; in order to distinguish the data of each byte from the start of output and output, the server 2 according to a predetermined method , in the blinking process in which the data output patch outputs one (group) of data (differential signal patch output clock signal process) It also includes an output start instruction and an end instruction; the start instruction represents one byte of data to start output, and starts out
- Step 103 The client 1 receives the third information and converts it into a form of a pulsed optical signal.
- the client 1 receives the first method for processing the second information by the server 2 in step 102.
- the third information, the first method of converting the output into the form of the pulsed optical signal specifically comprises: the client 1 is controlled by the control information, and the output area outputs different brightness states according to the control information and the bit; for example: when the transmission bit is " When 1 ", the output state of the client 1 is the first brightness. When the transmission bit is "0", the state of the output of the client 1 is the second brightness.
- the client 1 pulse optical signal is output, it is divided into two types.
- the first form is that the pulsed optical signal contains only a single luminance color block: the data in the second information is output in the form of serial output.
- the control information is controlled to include an output start command and an end command in the blinking process of the dynamic pulse light signal image serially outputting the data;
- the instruction starts outputting on behalf of one byte of data, and starts outputting data after the start of the instruction.
- the end instruction represents the output of the data of the byte.
- the start command and the end command are agreed by the client 1 and the dynamic password device 3 in the same way. Set.
- the second form is that the pulsed optical signal includes a plurality of luminance patches;
- the client 1 maps the control information to the control color block according to the control of the control information;
- the plurality of color blocks include two parts, the control color block and the data output color block; wherein, when the control color block is a clock signal color block,
- the function is to control the output synchronization of the data output color block, and control the output of the next (group) data when the rising edge (falling edge) of the clock; in order to distinguish the data of each byte, the output and output are completed, and the client 1 is scheduled.
- the method further includes: outputting a start instruction and an end instruction during a blinking process in which the data output patch outputs a (group) data (a clock signal patch output clock signal process); the start instruction represents a byte of data starting output, The output data is started after the start of the instruction, and the end instruction represents the output of the data of the byte. If the data output is a four-bit parallel transmission, only the upper four bits of the byte are output at the time of the falling (rising) edge of the clock signal.
- the signal rises (falls) and outputs the lower four bits along the time to achieve the technical effect;
- the output is eight-bit parallel transmission, and only one byte of data can be output simultaneously at the falling (rising) edge of the clock signal to achieve the technical effect;
- the control color block is a differential signal color block, the effect of the differential signal color block is respectively
- the first brightness and the second brightness are sampled to set and output a critical brightness value when the screen brightness of the client 1 is different; the client 1 according to a predetermined method, when the output state brightness is higher than (below) the critical brightness Value, the output state is regarded as "first brightness", below (higher than) the critical brightness value, the output state is regarded as "second brightness", and below the critical brightness value, the output state is regarded as "first brightness value”;
- the differential signal color block can output the intermediate brightness value when the client 1 screen is very dark, so that the dynamic password device 3 can more accurately receive and recognize the state of the optical signal; in order to distinguish the data of each byte,
- the client 1 is in the blinking process of outputting a (group) data in the data output patch according to a predetermined method (differential signal color block input)
- a predetermined method differential signal color block input
- the output start instruction and the end instruction are also included; the start instruction represents one byte of data starting output, and the output data is started after the start instruction ends, and the end instruction represents the data output of the byte; if the data output is eight Bit-parallel transmission, only need to output a byte of data at the same time as the differential signal output critical brightness value can achieve technical effect;
- server 2 for different resolution client 1 display the mapped output color block can be A plurality of forms are embodied to receive the pulsed light signal on the display of different resolutions suitable for the dynamic password device 3.
- the second method for processing the second information, the second method for the terminal to receive the third information and converting it into the form of the pulsed optical signal specifically includes: the client 1 outputs the dynamic pulse optical signal image to the client 1 screen A certain area; it should be noted that the area where the dynamic pulse light signal image is displayed is random or fixed.
- Step 104 The dynamic password device 3 collects a pulsed light signal, performs preset processing on the pulsed light signal to convert into intermediate information, and determines whether the intermediate information is correct; the dynamic password device determines the received intermediate information within a preset time; Preferably, the dynamic password device 3 receives the pulsed light signal through the photosensitive element, and the photosensitive element located on the dynamic password device 3 may be one or more. When the photosensitive element is plural, the arrangement may be: Arrangement, matrix arrangement, circumferential arrangement, etc. If yes, go to step 105; if no, go to step 111; the dynamic password device 3 collects the pulsed light signal, performs preset processing on the pulsed optical signal to convert to intermediate information, and determines whether the intermediate information is correct.
- Step 1104-1 The dynamic password device 3 selects a pulse light signal at a position suitable for the dynamic password device 3 to collect the pulsed light signal in the output region of the pulsed light signal;
- Step 1104-2 The dynamic password device 3 receives and recognizes one byte.
- Method 1 If the client 1 outputs a pulsed optical signal in a first form, that is, only includes a single luminance patch, the dynamic password device 3 first receives the start command according to a preset method, and passes Ending the command to know that the byte data is received, and then identifying the received pulsed light signal according to the same pre-agreed data processing mode as the server 2; for example: when the received state is the first brightness, it is recognized as Transmission bit "1", when the received state is the second brightness, it is recognized as the transmission bit "0"; Method 2: If the client 1 outputs a pulsed optical signal in a second form, that is, includes a plurality of luminance patches, and the control patch is a clock signal patch, the dynamic password device 3 receives the clock signal output from the clock signal patch.
- Pulse optical signal Pulse optical signal, and according to the data output block output data method, according to the rising edge (falling edge) of the clock signal to receive data; if the output instruction is received, the start instruction and the end instruction are judged according to the instruction type, and then receive To the byte data; the dynamic password device 3 can also receive one byte (half a byte) of data on the falling (rising) edge of the clock signal according to a preset method; Method 3: If the client 1 outputs a pulsed optical signal For the second form, that is, including a plurality of luminance patches, and the control patch is a differential signal patch, the dynamic password device 3 determines the brightness state of the received pulsed optical signal according to the critical luminance value of the differential signal patch output, and then According to the output pulse optical signal, the start command is received first, and the end command is used to know the byte data reception.
- a pulsed optical signal For the second form, that is, including a plurality of luminance patches, and the control patch is a differential signal
- Step 1104-3 The dynamic password device 3 determines whether the byte data is a header information; if not, executing step 1104-2; if yes, executing step 1104-4; the dynamic password device 3 determines whether the byte data is a header
- the part information is realized by judging whether the byte data is an unusable character in the ASCII table; if it is an unusable character in the ASCII table, it is regarded as header information; it should be noted that if the dynamic password device is in advance If the byte data representing the header information is not determined within the set time, the dynamic password times out.
- Step 1104-4 The dynamic password device 3 receives a set of intermediate information including the header information, and determines whether the group of intermediate information is correct; the dynamic password device 3 receives the preset byte data after the header information, and the header The part information is combined with the subsequent preset byte data to obtain a set of intermediate information; if not, step 1104-2 is performed; if yes, step 1104-5 is performed; specifically, the dynamic password device 3 determines the group by The parity bit of the intermediate information is used to know whether the group intermediate information is correct; Step 1104-5: The dynamic password device 3 stores the group of intermediate information, and determines whether all the intermediate information has been identified and stored; if not, the steps are performed.
- Step 1104-6 The dynamic password device 3 combines all the intermediate information; the dynamic password device 3 collects the pulsed light signal, and performs preset processing on the pulsed optical signal to be converted into The second method of intermediate information and determining whether the intermediate information is correct includes: Step 1204-1: The dynamic password device 3 selects a pulse light signal at a position suitable for the dynamic password device 3 to collect the pulsed light signal in the output region of the pulsed light signal; Step 1204-2: The dynamic password device 3 receives and recognizes all the data, and According to the header information, all the data is divided into a plurality of sets of intermediate information; after the dynamic password device 3 receives and recognizes all the data, all the data is formed into byte data according to a preset method, and then the byte determined as the header information is determined.
- the data and the subsequent preset byte data are combined into a plurality of data packets, that is, multiple sets of intermediate information are obtained; the method for the dynamic password device 3 to receive and recognize all the data is as follows: Specifically, Method 1: If the client 1 outputs a pulse When the optical signal is in the first form, that is, only a single color patch is included, the dynamic password device 3 first receives the start command according to a preset method, and knows that the byte data is received by the end command, and then according to the server.
- Method 2 the same pre-agreed data processing mode, identifying the received pulsed light signal; For example, when the received state is the first brightness, it is recognized as the transmission bit "1", and when the received state is the second brightness, it is recognized as the transmission bit "0"; similarly until all data is received; Method 2: If the client 1 outputs a pulsed optical signal in a second form, that is, includes a plurality of luminance patches, and the control patch is a clock signal patch, the dynamic password device 3 receives the pulsed optical signal in synchronization with the clock signal output from the clock signal patch.
- the dynamic password device 3 It is also possible to receive one byte (half a byte) of data on the falling (rising) edge of the clock signal according to a preset method; similarly until receiving all data; Method 3: If the client 1 outputs a pulsed optical signal as the second The form includes a plurality of luminance patches, and the control patches are differential signal patches, and the dynamic password device 3 is based on the differential signal color.
- the output critical brightness value is used to determine the brightness state of the received pulsed light signal, and then the start command is received according to the output pulse light signal, and the end command is used to know that the byte data is received, and then according to the same advance as the server 2
- the agreed data processing mode identifies the received pulsed optical signal to obtain the byte data; the dynamic password device 3 can also receive the byte data when receiving the differential signal output critical brightness value according to a preset method; Until the entire data is received; the dynamic password device 3 judges whether the byte data is the header information by determining whether the byte data is an unusable character in the ASCII table.
- Step 1204-3 The dynamic password device 3 sequentially determines whether each group of intermediate information is correct.
- step 1204-4 If at least one group of intermediate information is incorrect, step 1204-4 is performed; if the intermediate information of all groups is correct, step 1204-5 is performed.
- the dynamic password device 3 knows whether the group intermediate information is correct by determining the check bit of each group of intermediate information; Step 1204-4: The dynamic password device 3 continues to receive and identify the remaining intermediate information that fails the determination; Step 1204-3; Step 1204-5: The dynamic password device 3 combines all the intermediate information.
- the first brightness is a brighter brightness
- the second brightness is a darker brightness. When the brightness value is higher than the brightness value limit, it is regarded as the first brightness.
- the brightness value When the brightness value is lower than the dark value limit, it is regarded as the first 2 brightness; or the first brightness is dark brightness, the second brightness is brighter brightness, when the brightness value is higher than the brightness value limit, it is regarded as the first brightness, when the brightness value is lower than the dark value limit, it is regarded as the second brightness.
- FIG. 6 is a flowchart of a method for authenticating a dynamic password according to Embodiment 4 of the present invention.
- the method includes the following steps: Step S20: The client 1 acquires first information, and generates second information according to the first information.
- step S40 the client 1 sets each transmission bit in the second information to a corresponding brightness state or color state to obtain third information, and the third information includes: flicker information of the pulse light signal or image information of the dynamic pulse light signal.
- step S60 the client 1 converts the third information into a pulsed optical signal output.
- step S80 when the dynamic password device 3 receives the pulsed light signal, it converts it into intermediate information, and the dynamic password device 3 extracts part or all of the intermediate information and converts it into display information for viewing by the user.
- step S100 the dynamic password device 3 receives the trigger information, and generates a first dynamic password according to the intermediate information.
- step S120 the client 1 receives the first dynamic password input by the user and sends the first dynamic password and the second information to the server 2.
- Step S140 the server 2 generates one or a set of second dynamic passwords according to the second information, and verifies whether the first dynamic password is legal through one or a set of second dynamic passwords; if the first dynamic password and a second dynamic password or The second dynamic password is the same as any one of the second dynamic passwords, and the first dynamic password is validated; if the first dynamic password is associated with any of the second dynamic password or a second dynamic password, Not the same, verify that the first dynamic password is invalid.
- the dynamic password authentication method of the above embodiment of the present invention transmits related user information to the dynamic password device 3 by using a non-wired connection transmission method, thereby reducing manual input in the related art and increasing transmission efficiency of a large amount of information. .
- the client 1 transmits the related user information to the dynamic password device 3 through a non-connected transmission method and generates a corresponding dynamic password, and the dynamic password is used for the same server. 2 generated dynamic passwords for comparison, with higher security.
- the client 1 performs the processing of the first signal in the fourth embodiment, and the dynamic password device 3 needs to participate in the generation of the dynamic password as the change factor.
- the client 1 in the fourth embodiment completes the conversion process of the first information. Comparing the third embodiment, the workload of the server 2 is reduced, and the work efficiency is relatively improved.
- the client 1 sets each transmission bit in the second information to a corresponding brightness state or color state, and obtaining the third information includes: the client 1 controls each transmission in the second information according to the control signal. a brightness state or a color state in a predetermined area, obtaining flicker information of the pulsed light signal; or the client client 1 controlling a brightness state or a color state of each of the second bits in the second information according to the control signal,
- the image information of the dynamic pulsed light signal is obtained.
- converting it to intermediate information may include: ⁇ '. acquiring the pulsed light signal in a predetermined output region; ⁇ '.
- FIG. 7 is a schematic flow chart of a method for implementing dynamic password authentication according to FIG. 6.
- Step 301 The client 1 receives the first information sent by the client 1, and generates the second information according to the first information.
- the first information in this embodiment includes the user identifier, the account information, the amount, the additional information, and the like.
- the code is used to identify the identity of the user, which can be modified by the user;
- the additional information is a set of information input by the user, and can be a combination of characters of any length;
- the client 1 extracts the preset from the first information according to a pre-agreed method.
- the information is generated according to the preset information.
- Account Information 11112222 ; Amount : 45600;
- the first information may also include time, location, password, etc. as preset information.
- the client 1 may use the preset information as the second information, or may not extract the preset information, and directly use the first information as the second information; or add other information based on the preset information to generate the second information.
- the client 1 extracts preset information and adds additional information as the second information.
- the second information generated by the client 1 is: user identification code: 123456; account information: 11112222; amount: 45600; additional information: 654321;
- the client 1 separately converts each information in the second information into a packet, and the formed data packet is as follows: a0 7 31 32 33 34 35 36 0 al 9 31 31 31 31 32 32 32 9 9 a2 6 34 35 36 30 30 22 a3 7 36 35 34 33 32 31 22
- a0, al, a2, and a3 respectively represent the header information of each packet, and it can be judged according to the header information that the group data has been received.
- the header information can also be represented by characters that are not usable in other ASCII tables, which avoids confusion with the transmitted byte data.
- Step 302 The client 1 processes the second information to obtain the third information.
- Step 303 The client 1 converts the third information into a pulsed optical signal for output.
- the number of photosensitive elements on the dynamic password device 3 may be one or more.
- the arrangement may be: one line arrangement, matrix arrangement, circumferential arrangement, and the like. If yes, go to step 305; if no, go to step 311; the dynamic password device 3 collects the pulsed light signal, performs preset processing on the pulsed light signal to convert into intermediate information, and determines whether the intermediate information is correct within a preset time.
- the first method is specifically the same as the first method in which the dynamic password device 3 collects the pulsed optical signal in step 104 in the first embodiment, performs preset processing on the pulsed optical signal, converts it into intermediate information, and determines whether the intermediate information is correct.
- the second method of the dynamic password device 3 collecting the pulsed light signal, performing the preset processing on the pulsed light signal to convert into the intermediate information, and determining whether the intermediate information is correct within a preset time is the same as the step 104 in the first embodiment.
- the second dynamic password device 3 collects a pulsed optical signal, performs a preset processing on the pulsed optical signal, converts it into intermediate information, and determines whether the intermediate information is correct.
- the second method is not described herein.
- Step 305 The dynamic password device converts the combined intermediate information into fourth information, and outputs fourth information. Specifically, the dynamic password device extracts part or all of the information in the intermediate information and converts it into a decimal value as the fourth information; the fourth information is display information that is convenient for the user to view.
- the fourth information includes the user identifier, account data, amount, and additional data of the user.
- Step 306 The dynamic password device 3 determines whether the confirmation information input by the user is received within the preset time; if yes, step 307 is performed; if not, step 311 is performed; preferably, in step 306 of the embodiment, The preset time is 60 seconds.
- Step 307 The dynamic password device 3 receives the confirmation information of the user, generates a fifth dynamic password according to the intermediate information, and outputs a fifth dynamic password.
- the method for generating the dynamic password by the dynamic password device 3 may be: As a third dynamic factor, the third dynamic factor and the pre-stored first static factor are encrypted by a built-in algorithm to generate a fifth dynamic password, and the fifth dynamic password is output; Step 308: Client 1 receives user input The fifth dynamic password, the fifth dynamic password and the second information are sent to the server 2; Step 309: The server 2 receives the fifth dynamic password and the second information sent by the client 1, and generates a sixth dynamic password according to the second information; The method for the server 2 to generate the sixth dynamic password is the same as the method for the dynamic password device 3 to generate the fifth dynamic password in step 307.
- the server 2 stores the second static factor in advance as the first static factor in the dynamic password device 3.
- Step 310 The server 2 verifies whether the sixth dynamic password is the same as the fifth dynamic password sent by the client 1; if yes, the verification passes, performing a user operation; if not, executing step 312; Step 311: The dynamic password device 3 outputs an error message to stop the operation.
- Step 312 The server 2 sends a message prompting the dynamic password error to the client 1, and the client 1 outputs the error message.
- step 312 can also perform the following operations: The server 2 sends a message prompting the dynamic password error to the client 1, and the client 1 prompts the user to re-enter the dynamic password.
- FIG. 8 is a flow chart showing another method of authenticating a dynamic password according to FIG. 6. As shown in FIG.
- Step 401 The client 1 receives the first information, and generates second information according to the first information.
- the information includes user identification code, account data, amount and additional data, etc.; the user's personal identification code is used to identify the user's identity, which can be modified by the user; the additional data is a set of data input by the user, which can be a combination of characters of any length.
- the server 2 extracts preset information from the first information according to a pre-agreed method, and generates second information according to the preset information.
- the server 2 may use the preset information as the second information, or may not extract the preset information, and directly use the first information as the second information; or add other information based on the preset information to generate the second information.
- the server 2 extracts preset information and adds additional information as the second information.
- the second information generated by the server 2 is: a user identifier: 123456; Account information: 11112222; Amount: 45600; Additional information: 654321; Server 2 converts each information in the second information into groups, and the resulting data package is as follows: aO 7 31 32 33 34 35 36 0 al 9 31 31 31 31 32 32 32 32 32 9 a2 6 34 35 36 30 30 22 a3 7
- a0, al, a2, and a3 respectively represent the header information of each packet. According to the header information, it can be judged that the group data has been received.
- the header information can also be represented by characters that are not usable in other ASCII tables, which avoids confusion with the transmitted byte data.
- Step 402 The client 1 processes the second information to obtain the third information.
- the specific implementation process of the step 402 in this embodiment is the same as the step 302 in the third embodiment;
- Step 403 The client 1 converts the third information into a pulsed optical signal for output.
- Step 404 The dynamic password device 3 collects the pulsed light signal, performs preset processing on the pulsed light signal to convert into intermediate information, and determines whether the intermediate information is correct; the dynamic password device judges the received intermediate information within a preset time; Preferably, the dynamic password device 3 receives the pulsed light signal through the photosensitive element, and the photosensitive element located on the dynamic password device 3 may be one or more.
- the arrangement may be: Arrangement, matrix arrangement, circumferential arrangement, etc.
- dynamic password device 3 collects pulsed light signal, performs preset processing on pulsed light signal to convert to intermediate information, and determines whether the intermediate information is correct.
- the second method of converting the processing into the intermediate information and determining whether the intermediate information is correct is specifically the same as the dynamic password device 3 in step 104 in the first embodiment, collecting the pulse light signal, and performing preset processing on the pulsed light signal to convert into intermediate information, and The second method for judging whether the intermediate information is correct is not described here.
- Step 405 The dynamic password device converts the combined intermediate information into fourth information, and outputs the fourth information. Specifically, the dynamic password device extracts part or all information in the intermediate information, and converts it into a decimal value as a fourth. Information; the fourth information is display information that is convenient for the user to view. It should be noted that, in this embodiment, the fourth information includes the user identifier, account data, amount, and additional data of the user.
- Step 406 The dynamic password device 3 determines whether the confirmation information input by the user is received within the preset time; if yes, step 407 is performed; if no, step 411 is performed; preferably, in step 406 of the embodiment, Set the time to 60 seconds.
- Step 407 The dynamic password device 3 receives the confirmation information, generates a seventh dynamic password according to the intermediate information, and outputs a seventh dynamic password.
- the method for generating the dynamic password by the dynamic password device 3 may be: the dynamic password device 3 uses the intermediate information.
- the third dynamic factor, the third additional dynamic factor, and the pre-stored first static factor are encrypted by using a built-in algorithm to generate a seventh dynamic password, and the seventh dynamic password is output; preferably, The third additional dynamic factor may be one of a time factor and a time factor.
- the method for generating the second dynamic password by the server 2 is the same as the method for generating the seventh dynamic password by the dynamic password device 3 in step 407.
- the server 2 uses the built-in second information as the fourth dynamic factor. And according to the current fourth additional dynamic factor, increase or decrease within a predetermined range, and use a built-in algorithm to encrypt the fourth dynamic factor, the fourth additional dynamic factor, and the pre-stored second static factor to generate a second group.
- the dynamic password; the fourth additional dynamic factor is the same as the third additional dynamic factor used in generating the seventh dynamic password; preferably, the server 2 pre-stores the second static factor is the same as the first static factor in the dynamic password device 3.
- Step 410 The server 2 verifies whether the second dynamic password has the same dynamic password as the seventh dynamic password sent by the client 1; if yes, the verification succeeds, and the user operation is performed; if not, step 412 is performed; The dynamic password device 3 outputs an error message and stops the operation.
- Step 412 The server 2 sends the information indicating the dynamic password error to the client 1, and the client 1 outputs the error information. Preferably, in the embodiment, step 412 can also be performed.
- the following operation server 2 sends data indicating a dynamic password error to the client 1, and the client 1 prompts the user to re-enter the password.
- step 407 to step 409 may be replaced by step 407' to step 409': step 407': the dynamic password device 3 receives the confirmation information, generates the seventh dynamic password according to the third information, and outputs the seventh.
- the dynamic password and the second value; specifically, the method for generating the dynamic password by the dynamic password device 3 may be: the dynamic password device 3 uses the third information as the third dynamic factor, and uses the built-in algorithm for the third dynamic factor and the third additional dynamic
- the factor and the pre-stored first static factor perform an encryption operation to generate a seventh dynamic password, and output a seventh dynamic password.
- the third additional dynamic factor may be a second value, and may also be a second value and a time factor.
- Step 408 ′ The client 1 receives the seventh dynamic password and the second value input by the user, and sends the seventh dynamic password, the second value, and the second information to the server 2;
- Step 409 ′ The server 2 receives the sending by the client 1 a seventh dynamic password, a second value, and a second information, generating a second set of dynamic passwords based on the second information and the second value; a method for the server 2 to generate the second set of dynamic passwords and a dynamic password device 3 generating the seventh dynamics in step 407
- the method of the password is the same; specifically, in the embodiment, the server 2 uses the built-in second information as the fourth dynamic factor, and increases or decreases within a predetermined range according to the current fourth additional dynamic factor, and adopts built-in
- the algorithm encrypts the fourth dynamic factor, the fourth additional dynamic factor and the pre-stored second static factor to generate a second set of dynamic passwords; the fourth additional dynamic factor and the third additional dynamic factor used in generating the seventh dynamic password
- Step 302 The client 1 processes the second information to obtain the third information;
- the first method for processing the second information specifically includes: the client 1 performs mapping processing on each bit of the second information by using a pre-agreed data processing mode, and the output area of the client 1 controls the output according to different transmission bits. Different brightness states; for example: When the transmission bit is "1", the client 1 controls the state of the output of the client 1 to be the first brightness, and when the transmission bit is "0", the client 1 controls the state of the output of the client 1
- the second brightness is the second information.
- the third information is the second information.
- the second method for processing the second information by the client 1 includes: the client 1 sets different brightness states according to different transmission bits according to a pre-agreed data processing mode, and maps the second information to be transmitted into dynamic Pulsed light signal image; For example: When the transmission bit is "1", the client 1 controls the state of the color block output corresponding to the dynamic pulse light signal image as the first brightness. When the transmission bit is "0", the client 1 controls the dynamic pulse light signal image. The state of the corresponding color block output is the second brightness; the client 1 maps the second information to be transmitted into a dynamic pulse light signal image according to the difference of the transmission bits.
- the format of the dynamic pulse optical signal image may be a variety of dynamic image formats such as GIF; specifically, the dynamic pulse optical signal image mapped by the client 1 is divided into two forms: The first form is a dynamic pulse optical signal. The image only contains a single luminance patch: The data in the second information is output as a serial output.
- the image of the dynamic pulsed light signal further includes an output start instruction and an end instruction; the start instruction represents one byte of data starting output, and the output data is started after the start instruction ends, and the end instruction represents the output of the data of the byte;
- the command and the end command are set in the same way as the client 1 and the dynamic password device 3 agree.
- the second form is a dynamic pulse optical signal image comprising a plurality of luminance patches; the plurality of patches includes two portions, a control patch and a data output patch; wherein, when the control patch is a clock signal patch, the function is Is to control the output synchronization of the data output color block, and control one (group) data when the rising edge (falling edge) of the clock; in order to distinguish the data of each byte from the start of output and output, the client 1 according to the predetermined method, In the blinking process in which the data output patch outputs a (group) data (during the clock signal patch output clock signal), the output start command and the end command are also included; the start command represents one byte of data to start outputting, at the beginning After the instruction ends, the data is output.
- the end instruction represents the data output of the byte. If the data output is four-bit parallel transmission, only the high four bits of one byte are output at the falling (rising) edge of the clock signal, and the clock signal rises. (falling) output the lower four bits along the time to achieve technical effect; if the data output is eight-bit parallel The output can be achieved by simultaneously outputting one byte of data at the same time as the falling (rising) edge of the clock signal.
- the effect of the differential signal color block is to the first brightness and the first
- the second brightness is sampled to set and output the critical brightness value when the brightness of the screen of the client 1 is different; the client 1 according to a predetermined method, when the output state brightness is higher than (below) the critical brightness value, the output state It is regarded as "first brightness”.
- the output state is regarded as "second brightness”, and below the critical brightness value, the output state is regarded as "first brightness value”; differential signal color block can In the case that the client 1 screen is very dark, the dynamic password device 3 is more accurately received and recognizes the state of the optical signal; in order to distinguish the data of each byte After the output and the output are completed, the client 1 further includes an output start command and an end command in a blinking process in which the data output patch outputs a (group) data according to a predetermined method (during the differential signal patch output clock signal);
- the start instruction represents one byte of data to start output, and starts outputting data after the start of the instruction.
- the end instruction represents the data output of the byte.
- the third information is a dynamic pulsed light signal image.
- the client 1 converts the third information into a pulsed optical signal for output.
- the client 1 receives the third information.
- the first method for converting the output into the form of the pulsed optical signal specifically includes: the client 1 controls the output area to output different brightness states according to the control information and the bit; for example: when the transmission bit is "1", the output of the client 1 The state is the first brightness.
- the state output by the client 1 is the second brightness.
- the client 1 pulse optical signal is output in two forms: The first form is pulsed light.
- the signal only contains a single luminance patch:
- the data in the second information is output as a serial output.
- the client 1 controls the dynamic pulse optical signal image in the data serial.
- the output flashing process also includes an output start command and an end command; the start command represents one byte of data to start output, and starts outputting after the start of the command. , Representing the end instruction byte data output is completed; start command and an end command to the client apparatus 1 and the dynamic password the same manner as 3-agreed set.
- the second form is that the pulse optical signal includes a plurality of luminance patches; the client 1 maps the control information of the control pulse optical signal output to the control patch; the plurality of patches includes two parts, the control patch and the data.
- Output color block wherein, when the control color block is a clock signal color block, the function is to control the output synchronization of the data output color block, and control the output of the next (group) data on the rising edge (falling edge) of the clock;
- One byte of data starts outputting and outputting, and the client 1 starts the output in the blinking process in which the data output patch outputs one (group) of data according to a predetermined method (in the process of outputting the clock signal of the clock signal patch) Instruction and end instruction;
- Start instruction represents one byte of data to start output, start outputting data after the start of instruction, and end instruction represents data output of the byte; if data output is four-bit parallel transmission, only need to be in clock signal Fall (rise)
- the end instruction represents the data output of the byte; if the data output is eight-bit parallel transmission, it is only necessary to output a byte of data at the same time as the differential signal output critical brightness value;
- the mapped output patches can be embodied in a variety of configurations to accommodate the dynamic password device 3 to receive pulsed optical signals on displays of different resolutions.
- the first brightness is a brighter brightness
- the second brightness is a darker brightness.
- the brightness value is higher than the brightness value limit, it is regarded as the first brightness.
- the brightness value When the brightness value is lower than the dark value limit, it is regarded as the first 2 brightness; or the first brightness is dark brightness, the second brightness is brighter brightness, when the brightness value is higher than the brightness value limit, it is regarded as the first brightness, when the brightness value is lower than the dark value limit, it is regarded as the second brightness.
- the second method for processing the second information specifically includes: the client 1 outputs the dynamic pulse optical signal image to the client 1 screen A certain area; it should be noted that the area where the dynamic pulse light signal image is displayed is random or fixed.
- the output form of the dynamic pulsed optical signal may also output different color brightness in a preset area; different color brightness represents different transmission bits; after the dynamic password device 3 receives the dynamic pulsed light signal According to the pre-agreed receiving method, different color brightness is recognized to the intermediate information.
- the 10 is a schematic diagram of a system for dynamic password authentication according to Embodiment 1 of the present invention, including a server 20, a client 10, and a dynamic password device 30;
- the server 20 includes: a first receiving module 201, configured to receive the first information and the first dynamic password sent by the client 10; the first generating module 202 is configured to generate second information according to the first information;
- the first sending module 204 is configured to send the third information in the first setting module 203 to the client 10, where the first information is sent to the corresponding information.
- the second sending module 101 is configured to: send the first information and the first dynamic password to the server 20; the second receiving module 102 is configured to receive the first information and the first dynamic password, and is further configured to receive the sending by the server 20
- the third information is: a conversion output module 103, configured to convert the third information into a pulsed optical signal output;
- the dynamic password device 30 includes: a third receiving module 301, configured to receive Receiving the pulsed optical signal and the trigger information output by the client 10;
- the identification conversion module 302 is configured to identify the pulsed optical signal received by the third receiving module 301 and convert it into intermediate information;
- the extraction module 303 is configured to extract and recognize the conversion Part or all of the intermediate information in the module 302, and convert it into display information for the user to view;
- the output module 304 is configured to:
- FIG. 11 is a schematic diagram of a system for dynamic password authentication according to a second embodiment of the present invention, including a server 21, a client 11, and a dynamic password device 31.
- the server 21 includes: The first receiving module 211 is configured to receive the first information sent by the client 11 and the first dynamic password.
- the first generating module 212 is configured to generate the second information according to the first information.
- the second information generated by the generating module 212 is sent to the client 11;
- the first password generating module 214 is configured to generate one or a set of second dynamic passwords according to the second information; and the verification module 215 is configured to pass the one or the first group
- the second dynamic password is used to receive the first information.
- the client 11 includes: a second sending module 111, configured to send the first information and the first dynamic password to the server 21, and a second receiving module 112, configured to receive the first information.
- the first dynamic password is further used to receive the second information sent by the server 21;
- the second setting module 113 is configured to set each of the second information to a corresponding brightness state or a color state to obtain the third information;
- the conversion output module 114 is configured to convert the third information into a pulsed optical signal output.
- the dynamic password device 31 includes: a third receiving module 311, configured to receive the client 11 The pulsed light signal and the triggering information are generated; the identification conversion module 312 is configured to identify the pulsed light signal received by the third receiving module 311 and convert it into intermediate information; and the extraction module 313 is configured to extract the identification conversion module 312. Part or all of the intermediate information and converted into display information for the user to view; the output module 314 is configured to output the display information converted by the extraction module 313 and the first dynamic password; the second password generating module 315 is configured to use the intermediate information Generate the first dynamic password.
- FIG. 12 is a schematic diagram of a system for dynamic password authentication according to a third embodiment of the present invention, including a server 22, a client 12, and a dynamic password device 32.
- the server 22 includes: a first receiving module 221, configured to receive the sending by the client 12. a first dynamic password and second information;
- the first password generating module 222 is configured to generate one or a set of second dynamic passwords according to the second information, and the verification module 223 is configured to verify whether the first dynamic password is legal by using one or a set of second dynamic passwords; the client 12
- the second sending module 121 is configured to receive the first information and the first dynamic password.
- the first generating module 122 is configured to generate the second information according to the first information.
- the first sending module 123 is configured to: The first dynamic password is sent to the server 22; the first setting module 124 is configured to set each transmission bit of the second information to a corresponding brightness state or color state to obtain third information; and a conversion output module 125, for The third information is converted into a pulsed light signal output;
- the dynamic password device 32 includes: a third receiving module 321 configured to receive the pulsed light signal and the trigger information; and an identification conversion module 322 configured to perform the pulsed optical signal received by the third receiving module 321 Identifying and converting it into intermediate information; an extraction module 323, configured to extract some or all of the intermediate information in the recognition conversion module 322, and It is converted into display information for the user to view; the output module 324 is configured to output the display information converted by the extraction module 323 and the first dynamic password; and the second password generation module 325 is configured to generate the first dynamic password according to the intermediate information.
- the steps shown in the flowchart of the accompanying drawings may be performed in a computer system such as a set of computer executable instructions, and, although the logical order is shown in the flowchart, in some cases, The steps shown or described may be performed in an order different than that herein.
- the application may also include a computer program that runs the above-described dynamic password authentication method, and a memory that holds the computer program. From the above description, it can be seen that the present invention achieves the following technical effects:
- the related user information is transmitted to the dynamic password device 3 by using a non-wired connection transmission method, thereby reducing manual input in the related art, and simultaneously Increase the transmission efficiency of a large amount of information, with higher security.
- modules or steps of the present invention can be implemented by a general-purpose computing device, which can be concentrated on a single computing device or distributed over a network composed of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device, such that they may be stored in the storage device by the computing device, or they may be separately fabricated into individual integrated circuit modules, or they may be Multiple modules or steps are made into a single integrated circuit module.
- the invention is not limited to any specific combination of hardware and software.
- the above is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Theoretical Computer Science (AREA)
- Computer Hardware Design (AREA)
- General Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- General Physics & Mathematics (AREA)
- Physics & Mathematics (AREA)
- Software Systems (AREA)
- Computing Systems (AREA)
- Storage Device Security (AREA)
- Optical Communication System (AREA)
Abstract
本发明公开了一种动态口令的认证方法及***。其中,该方法包括:服务器接收客户端发送的第一信息,并根据其生成第二信息,再将第二信息中每一个传输位设置为对应的亮度状态或颜色状态,得到第三信息,将第三信息发送给客户端;客户端将第三信息转换为脉冲光信号输出;动态口令装置接收脉冲光信号时,将其转换为中间信息,并提取部分或者全部中间信息并将其转换为供用户察看的显示信息;动态口令装置接收触发信息,根据中间信息生成第一动态口令;客户端接收用户输入的第一动态口令并将其发送至服务器;服务器根据第二信息生成一个或一组第二动态口令,并通过一个或一组第二动态口令来验证第一动态口令是否合法。通过本发明,提高认证安全性。
Description
动态口令的认证方法及*** 技术领域 本发明涉及信息安全领域, 具体而言, 涉及一种动态口令的认证方法及***。 背景技术 OTP全称是 one time password, 也称动态口令, 是根据专门的算法生成一个不可 预测的随机数字组合, 一个密码使用一次有效, 目前被广泛运用在网银、 网游、 电信 运营商、 电子政务、 企业等应用领域。 动态口令令牌是一种安全便捷的帐号防盗技术, 例如在网上交易过程中使用银行 配套的动态口令令牌可以有效保护交易和登录的认证安全, 而且采用动态口令就无需 定期修改密码, 安全省心, 对企事业内部应用尤其有用。 动态口令易维护由于短信网 关技术非常成熟, 大大降低短信密码***的复杂度和风险, 短信密码业务后期客服成 本低, 稳定的***在提升安全同时也营造良好的口碑效应, 这也是目前银行也大量采 纳这项技术很重要的原因。 动态口令令牌目前最为安全的身份认证方式, 应用最为广 泛的是基于时间同步的动态口令令牌,一般是每 60秒钟产生一个 6位 OTP口令, OTP 口令一次有效。 相关现有技术中, 挑战应答型的动态口令令牌最为安全, 但是通常的挑战码都要 人工去输入, 人工输入就难免会产生错误, 造成了时间成本上的浪费。 目前针对相关技术的动态口令的认证方法需要人工输入认证数据, 导致认证结果 易出错、 时间及人力成本较高的问题, 目前尚未提出有效的解决方案。 发明内容 针对相关技术的动态口令的认证方法需要人工输入认证数据, 导致认证结果易出 错、 时间及人力成本较高的问题, 目前尚未提出有效的问题而提出本发明, 为此, 本 发明的主要目的在于提供一种动态口令的认证方法及***, 以解决上述问题。 为了实现上述目的, 根据本发明的一个方面, 提供了一种动态口令的认证方法, 该动态口令的认证方法包括: 服务器接收客户端发送的第一信息, 并根据所述第一信 息生成第二信息; 所述服务器将所述第二信息中每一个传输位设置为对应的亮度状态 或颜色状态, 得到第三信息, 将所述第三信息发送给所述客户端, 所述第三信息包括:
脉冲光信号的闪烁信息或动态脉冲光信号的图像信息; 所述客户端将所述第三信息转 换为脉冲光信号输出; 所述动态口令装置接收并识别所述脉冲光信号, 将其转换为中 间信息, 所述动态口令装置提取部分或者全部所述中间信息并将其转换为供用户察看 的显示信息并输出; 所述动态口令装置接收触发信息, 根据所述中间信息生成第一动 态口令; 所述客户端接收用户输入的所述第一动态口令并将所述第一动态口令发送至 所述服务器; 所述服务器根据所述第二信息生成一个或一组第二动态口令, 并通过所 述一个或一组第二动态口令来验证所述第一动态口令是否合法; 如果所述第一动态口 令与所述一个第二动态口令或一组第二动态口令中的任何一个第二动态口令相同, 验 证所述第一动态口令合法; 如果所述第一动态口令与所述一个第二动态口令或一组第 二动态口令中的任何一个第二动态口令都不相同, 验证所述第一动态口令不合法。 进一步地, 所述服务器将所述第二信息中每一个传输位设置为对应的亮度状态或 颜色状态, 得到第三信息包括: 所述服务器根据控制信号控制所述第二信息中的每个 传输位在预定区域内的亮度状态或颜色状态, 得到所述脉冲光信号的闪烁信息; 或者 所述服务器根据控制信号控制所述第二信息中的每个传输位在不同区域中的亮度状态 或颜色状态, 得到所述动态脉冲光信号的图像信息。 进一步地, 所述动态口令装置接收并识别所述脉冲光信号, 将其转换为中间信息 包括: A. 在预定输出区域内采集所述脉冲光信号; B. 接收并识别所述脉冲光信号中 的一个字节数据; C.判断所述字节数据是否为头部信息; 如果所述字节数据为头部信 息, 执行 D; 如果所述字节数据不为头部信息, 返回 B; D. 接收并识别代表所述头 部信息之后的预设个字节数据的脉冲光信号, 将所述头部信息和所述预设个数字节数 据进行转换并组合, 得到一组合中间信息; E. 接收到所有的组合中间信息后, 将所 述所有的组合中间信息进行组合生成中间信息。 进一步地, 所述动态口令装置接收并识别所述脉冲光信号, 将其转换为中间信息 包括: 在预定输出区域内采集所述脉冲光信号; 接收并识别所述脉冲光信号中的所有 字节数据; 将所有代表头部信息的字节数据和其后续预设个数字节数据进行组合, 得 到所有的组合中间信息; 将所述所有的组合中间信息进行组合生成中间信息。 进一步地, 在将所述所有的组合中间信息进行组合生成中间信息之前包括: 所述 动态口令装置在预设时间内判断接收的所有的组合中间信息是否均正确; 如果在预设 时间内判断接收的所有的组合中间信息均正确, 将所有的组合中间信息进行组合生成 中间信息; 如果在预设时间内判断出接收的所有的组合中间信息中有不正确的, 所述 动态口令装置输出错误信息; 所述动态口令装置在预设时间内判断接收的所有的组合 中间信息是否均正确包括: 所述动态口令装置判断接收到的组合中间信息是否正确;
如果所述组合中间信息正确, 所述动态口令装置判断是否已接收到所有判断正确的组 合中间信息; 如果接收到所述所有判断正确的组合中间信息, 所述动态口令装置将所 述所有判断正确的组合中间信息进行组合; 如果未接收到所述所有判断正确的组合中 间信息, 返回 B; 如果该所述组合中间信息不正确, 判断是否到达预设时间, 如到达 预设时间, 所述动态口令装置输出错误信息, 如未到达预设时间, 返回 B。 进一步地, 在将所述所有的组合中间信息进行组合生成中间信息之前包括: 所述 动态口令装置在预设时间内判断接收的所有的组合中间信息是否均正确; 如果在预设 时间内判断接收的所有的组合中间信息均正确, 将所有的组合中间信息进行组合生成 中间信息; 如果在预设时间内判断出接收的所有的组合中间信息有不正确的, 所述动 态口令装置输出错误信息; 所述动态口令装置在预设时间内判断接收的所有的组合中 间信息是否均正确包括: a.所述动态口令装置依次判断所有组合中间信息是否均正确; 如果每组组合中间信息均正确,执行 b;如果至少有一组组合中间信息不正确,执行 c; b. 所述动态口令装置将所有组合中间信息进行组合生成中间信息; c. 所述动态口令 装置判断是否到达预设时间, 如到达预设时间, 则输出错误信息, 如未到达预设时间, 则继续接收未通过判断的组合中间信息, 执行 a。 进一步地, 所述动态口令装置接收触发信息, 根据所述中间信息生成第一动态口 令包括: 对所述中间信息和预先存储的第一静态因子进行加密运算, 得到所述第一动 态口令; 或者对所述中间信息、 附加动态因子和预先存储的第一静态因子进行加密运 算, 得到所述第一动态口令。 进一步地, 根据所述第一信息生成第二信息包括: 提取所述第一信息中的预设信 息, 将所述预设信息作为所述第二信息; 或者提取所述第一信息中的预设信息, 在所 述预设信息中添加附加信息生成所述第二信息; 或者将所述第一信息直接作为所述第 二信息。 为了实现上述目的,根据本发明的另一个方面,提供了一种动态口令的认证方法, 该动态口令的认证方法包括: 服务器接收客户端发送的第一信息, 并根据所述第一信 息生成第二信息; 所述服务器将所述第二信息发送给所述客户端, 所述客户端接收所 述第二信息, 并将所述第二信息中每一个传输位设置为对应的亮度状态或颜色状态, 得到第三信息, 所述第三信息包括: 脉冲光信号的闪烁信息或动态脉冲光信号的图像 信息; 所述客户端将所述第三信息转换为脉冲光信号输出; 所述动态口令装置接收并 识别所述脉冲光信号, 将其转换为中间信息, 所述动态口令装置提取部分或者全部中 间信息并将其转换为供用户察看的显示信息并输出;所述动态口令装置接收触发信息, 根据所述中间信息生成第一动态口令; 所述客户端接收用户输入的所述第一动态口令
并将所述第一动态口令发送至所述服务器; 所述服务器根据所述第二信息生成一个或 一组第二动态口令, 并通过所述一个或一组第二动态口令来验证所述第一动态口令是 否合法; 如果所述第一动态口令与所述一个第二动态口令或一组第二动态口令中的任 何一个第二动态口令相同, 验证所述第一动态口令合法; 如果所述第一动态口令与所 述一个第二动态口令或一组第二动态口令中的任何一个第二动态口令都不相同, 验证 所述第一动态口令不合法。 进一步地, 所述所述客户端接收所述第二信息, 并将所述第二信息中每一个传输 位设置为对应的亮度状态或颜色状态, 得到第三信息, 包括: 所述客户端接收到所述 第二信息后, 根据控制信号控制所述第二信息中的每个传输位在预定区域内的亮度状 态或颜色状态, 得到所述脉冲光信号的闪烁信息; 或者所述客户端接收到所述第二信 息后, 根据控制信号控制所述第二信息中的每个传输位在不同区域中的亮度状态或颜 色状态, 得到所述动态脉冲光信号的图像信息。 进一步地,所述动态口令装置接收并识别所述脉冲光信号,将其转换为中间信息, 包括: A. 在预定输出区域内采集所述脉冲光信号; B. 接收并识别所述脉冲光信号中 的一个字节数据; C.判断所述字节数据是否为头部信息; 如果所述字节数据为头部信 息, 执行 D; 如果所述字节数据不为头部信息, 返回 B; D. 接收并识别代表所述头 部信息之后的预设个字节数据的脉冲光信号, 将所述头部信息和所述预设个数字节数 据进行转换并组合, 得到一个组合中间信息; E. 接收到所有的组合中间信息后, 将 所述所有的组合中间信息进行组合生成中间信息。 进一步地,所述动态口令装置接收并识别所述脉冲光信号,将其转换为中间信息, 包括: 在预定输出区域内采集所述脉冲光信号; 接收并识别所述脉冲光信号中的所有 字节数据; 将所有代表头部信息的字节数据和其后续预设个数字节数据进行组合, 得 到所有的组合中间信息; 将所述所有的组合中间信息进行组合生成中间信息。 进一步地, 在将所述所有的组合中间信息进行组合生成中间信息之前包括: 所述 动态口令装置在预设时间内判断接收的所有的组合中间信息是否均正确; 如果在预设 时间内判断接收的所有的组合中间信息均正确, 将所有的组合中间信息进行组合生成 中间信息; 如果在预设时间内判断出接收的所有的组合中间信息中有不正确的, 所述 动态口令装置输出错误信息; 所述动态口令装置在预设时间内判断接收的所有的组合 中间信息是否均正确包括: 所述动态口令装置判断接收到的组合中间信息是否正确; 如果所述组合中间信息正确, 所述动态口令装置判断是否已接收到所有的判断正确的 组合中间信息; 如果接收到所述所有的判断正确的组合中间信息, 所述动态口令装置 将所有的判断正确的组合中间信息进行组合; 如果未接收到所述所有的判断正确的组
合中间信息, 返回 B; 如果所述组合中间信息不正确, 判断是否到达预设时间, 如到 达预设时间, 所述动态口令装置输出错误信息, 如未到达预设时间, 返回 B。 进一步地, 在将所述所有的组合中间信息进行组合生成中间信息之前包括: 所述 动态口令装置在预设时间内判断接收的所有的组合中间信息是否均正确; 如果在预设 时间内判断接收的所有的组合中间信息均正确, 将所有的组合中间信息进行组合生成 中间信息; 如果在预设时间内判断出接收的所有的组合中间信息有不正确的, 所述动 态口令装置输出错误信息; 所述动态口令装置在预设时间内判断接收的所有的组合中 间信息是否均正确包括: a.所述动态口令装置依次判断所有组合中间信息是否均正确; 如果每组组合中间信息均正确,执行 b;如果至少有一个组合中间信息不正确,执行 c; b. 所述动态口令装置将所有组合中间信息进行组合生成中间信息; c. 所述动态口令 装置判断是否到达预设时间, 如到达预设时间, 则输出错误信息, 如未到达预设时间, 则继续接收未通过判断的组合中间信息, 执行 a。 进一步地, 所述动态口令装置接收触发信息, 根据所述中间信息生成第一动态口 令包括: 对所述中间信息和预先存储的第一静态因子进行加密运算, 得到所述第一动 态口令; 或者对所述中间信息、 附加动态因子和预先存储的所述第一静态因子进行加 密运算, 得到所述第一动态口令。 进一步地, 根据所述第一信息生成第二信息包括: 提取所述第一信息中的预设信 息, 将所述预设信息作为所述第二信息; 或者提取所述第一信息中的预设信息, 在所 述预设信息中添加附加信息生成所述第二信息; 或者将所述第一信息直接作为所述第 二信息。 为了实现上述目的,根据本发明的另一个方面,提供了一种动态口令的认证方法, 该动态口令的认证方法包括: 客户端接收第一信息, 并根据所述第一信息生成第二信 息; 所述客户端将所述第二信息中每一个传输位设置为对应的亮度状态或颜色状态, 得到第三信息, 所述第三信息包括: 脉冲光信号的闪烁信息或动态脉冲光信号的图像 信息; 所述客户端将所述第三信息转换为脉冲光信号输出; 所述动态口令装置接收所 述脉冲光信号, 将其转换为中间信息, 所述动态口令装置提取部分或者全部中间信息 并将其转换为供用户察看的显示信息并输出; 所述动态口令装置接收触发信息, 根据 所述中间信息生成第一动态口令; 所述客户端接收用户输入的所述第一动态口令并将 所述第一动态口令和第二信息发送至所述服务器; 所述服务器根据所述第二信息生成 一个或一组第二动态口令, 并通过所述一个或一组第二动态口令来验证所述第一动态 口令是否合法; 如果所述第一动态口令与所述一个第二动态口令或一组第二动态口令 中的任何一个第二动态口令相同, 验证所述第一动态口令合法; 如果所述第一动态口
令与所述一个第二动态口令或一组第二动态口令中的任何一个第二动态口令都不相 同, 验证所述第一动态口令不合法。 进一步地, 所述客户端将所述第二信息中每一个传输位设置为对应的亮度状态或 颜色状态, 得到第三信息包括: 所述客户端根据控制信号控制所述第二信息中的每个 传输位在预定区域内的亮度状态或颜色状态, 得到所述脉冲光信号的闪烁信息; 或者 所述客户端根据控制信号控制所述第二信息中的每个传输位在不同区域中的亮度状态 或颜色状态, 得到所述动态脉冲光信号的图像信息。 进一步地, 所述动态口令装置接收所述脉冲光信号并将其转换为中间信息包括: Α' . 在预定输出区域内采集所述脉冲光信号; Β' . 接收并识别所述脉冲光信号中的一 个字节数据; C.判断所述字节数据是否为头部信息; 如果所述字节数据为头部信息, 执行 D' ; 如果所述字节数据不为头部信息, 返回 Β' ; D' . 接收并识别代表所述头部 信息之后的预设个数字节数据的脉冲光信号, 将所述头部信息和所述预设个数字节数 据进行转换并组合, 得到一个组合中间信息; Ε' . 接收到所有的组合中间信息后, 将 所述所有的组合中间信息进行组合生成中间信息。 进一步地, 所述动态口令装置接收所述脉冲光信号并将其转换为中间信息包括: 在预定输出区域内采集所述脉冲光信号; 接收并识别所述脉冲光信号中的所有字节数 据; 将所有代表头部信息的字节数据和其后续预设个数字节数据进行组合, 得到所有 的组合中间信息; 将所述所有的组合中间信息进行组合生成中间信息。 进一步地, 在将所述所有的组合中间信息进行组合生成中间信息之前包括: 所述 动态口令装置在预设时间内判断接收的所有的组合中间信息是否均正确; 如果在预设 时间内判断接收的所有的组合中间信息均正确, 将所有的组合中间信息进行组合生成 中间信息; 如果在预设时间内判断出接收的所有的组合中间信息中有不正确的, 所述 动态口令装置输出错误信息; 所述动态口令装置在预设时间内判断接收的所有的组合 中间信息是否均正确包括: 所述动态口令装置判断接收到的组合中间信息是否正确; 如果所述组合中间信息正确, 所述动态口令装置判断是否已接收到所有的判断正确的 组合中间信息; 如果接收到所述所有的判断正确的组合中间信息, 所述动态口令装置 将所述所有判断正确的组合中间信息进行组合; 如果未接收到所述所有判断正确的组 合中间信息, 返回 Β' ; 如果所述组合中间信息不正确, 判断是否到达预设时间, 如到 达预设时间, 所述动态口令装置输出错误信息, 如未到达预设时间, 返回 Β'。 进一步地, 在将所述所有的组合中间信息进行组合生成中间信息之前包括: 所述 动态口令装置在预设时间内判断接收的所有的组合中间信息是否均正确; 如果在预设
时间内判断接收的所有的组合中间信息均正确, 将所有的组合中间信息进行组合生成 中间信息; 如果在预设时间内判断出接收的所有的组合中间信息中有不正确的, 所述 动态口令装置输出错误信息; 所述动态口令装置在预设时间内判断接收的所有的组合 中间信息是否均正确包括: a' . 所述动态口令装置依次判断所有组合中间信息是否均 正确; 如果每组组合中间信息均正确,执行 b' ; 如果至少有一组组合中间信息不正确, 执行 c' ; b' .所述动态口令装置将所述所有组合中间信息进行组合生成组合中间信息; c' . 所述动态口令装置判断是否到达预设时间, 如到达预设时间, 则输出错误信息, 如未到达预设时间, 则继续接收未通过判断的剩余组合中间信息, 执行 a'。 进一步地, 所述动态口令装置接收触发信息, 根据所述中间信息生成第一动态口 令包括: 对所述中间信息和预先存储的第一静态因子进行加密运算, 得到所述第一动 态口令; 或者对所述中间信息、 附加动态因子和预先存储的所述第一静态因子进行加 密运算, 得到所述第一动态口令。 进一步地, 根据所述第一信息生成第二信息包括: 提取所述第一信息中的预设信 息, 将所述预设信息作为所述第二信息; 或者提取所述第一信息中的预设信息, 在所 述预设信息中添加附加信息生成所述第二信息; 或者将所述第一信息直接作为所述第 二信息。 为了实现上述目的, 根据本发明的一方面, 提供了一种动态口令的认证***, 该 动态口令的认证***包括: 服务器、 客户端和动态口令装置; 其中, 所述服务器用于 接收所述客户端发送的第一信息和第一动态口令, 根据所述第一信息生成第二信息, 并将所述第二信息中每一个传输位设置为对应的亮度状态或颜色状态,得到第三信息, 将所述第三信息发送给所述客户端, 同时, 根据所述第二信息生成一个或一组第二动 态口令, 并通过所述一个或一组第二动态口令来验证所述第一动态口令是否合法; 所 述客户端用于向所述服务器发送所述第一信息和所述第一动态口令, 并接收所述服务 器发送的所述第三信息, 将所述第三信息转换为脉冲光信号输出; 所述动态口令装置 用于接收所述客户端输出的所述脉冲光信号和触发信息, 对所述脉冲光信号进行识别 并将其转换为中间信息, 根据所述中间信息生成所述第一动态口令, 在提取到部分或 者全部所述中间信息之后, 将其转换为供用户察看的显示信息, 并输出所述提取模块 转换的所述显示信息和所述第一动态口令。 为了实现上述目的, 根据本发明的又一方面, 提供了一种动态口令的认证***, 该动态口令的认证***包括: 服务器、 客户端和动态口令装置; 其中, 所述服务器用 于接收所述客户端发送的第一信息和第一动态口令,根据所述第一信息生成第二信息, 并根据所述第二信息生成一个或一组第二动态口令, 通过所述一个或一组第二动态口
令来验证所述第一动态口令是否合法, 并将所述第二信息发送给所述客户端; 所述客 户端用于向所述服务器发送所述第一信息和所述第一动态口令, 并接收所述服务器发 送的所述第二信息, 将所述第二信息中每一个传输位设置为对应的亮度状态或颜色状 态, 得到第三信息, 将所述第三信息转换为脉冲光信号输出; 所述动态口令装置用于 接收所述客户端输出的所述脉冲光信号和触发信息, 对所述脉冲光信号进行识别并将 其转换为中间信息, 根据所述中间信息生成所述第一动态口令, 在提取到部分或者全 部所述中间信息之后, 将其转换为供用户察看的显示信息, 并输出所述提取模块转换 的所述显示信息和所述第一动态口令。 为了实现上述目的, 根据本发明的又一方面, 提供了一种动态口令的认证***, 该动态口令的认证***包括: 服务器、 客户端和动态口令装置; 其中, 所述服务器用 于接收所述客户端发送的第一动态口令和第二信息, 根据所述第二信息生成一个或一 组第二动态口令, 并通过所述一个或一组第二动态口令来验证所述第一动态口令是否 合法; 所述客户端用于接收所述第一信息和用户输入的所述第一动态口令, 根据所述 第一信息生成所述第二信息,将所述第二信息和所述第一动态口令发送给所述服务器, 并在将所述第二信息中每一个传输位设置为对应的亮度状态或颜色状态, 得到第三信 息之后, 将所述第三信息转换为脉冲光信号输出; 所述动态口令装置用于接收所述脉 冲光信号和触发信息, 对接收的脉冲光信号进行识别并将其转换为中间信息, 根据所 述中间信息生成所述第一动态口令, 在提取到部分或者全部中间信息之后, 将其转换 为供用户察看的显示信息, 并输出所述提取模块转换的所述显示信息和所述第一动态 口令。 通过本发明, 采用服务器接收客户端发送的第一信息, 并根据所述第一信息生成 第二信息; 所述服务器将所述第二信息中每一个传输位设置为对应的亮度状态或颜色 状态, 得到第三信息, 将所述第三信息发送给所述客户端; 或者所述服务器将所述第 二信息发送给所述客户端, 所述客户端接收所述第二信息, 并将所述第二信息中每一 个传输位设置为对应的亮度状态或颜色状态, 得到第三信息; 所述客户端将所述第三 信息转换为脉冲光信号输出; 所述动态口令装置接收所述脉冲光信号时, 将其转换为 中间信息, 所述动态口令装置提取部分或者全部中间信息并将其转换为供用户察看的 显示信息; 所述动态口令装置接收触发信息, 根据所述中间信息生成第一动态口令; 所述客户端接收用户输入的所述第一动态口令并将所述第一动态口令发送至所述服务 器; 所述服务器根据所述第二信息生成一个或一组第二动态口令, 并通过所述一个或 一组第二动态口令来验证所述第一动态口令是否合法; 在所述第一动态口令正确的情 况下执行用户操作。 解决了相关现有技术的动态口令的认证方法需要人工输入认证数
据, 导致认证结果易出错、 时间及人力成本较高的问题, 进而实现降低成本, 提高认 证安全性的效果。 附图说明 此处所说明的附图用来提供对本发明的进一步理解, 构成本申请的一部分, 本发 明的示意性实施例及其说明用于解释本发明, 并不构成对本发明的不当限定。 在附图 中: 图 la-lb为本发明实施例一的动态口令的认证***的信号传输示意图; 图 2为本发明实施例二的动态口令的认证***的信号传输示意图; 图 3为本发明实施例三的动态口令的认证方法的流程图; 图 4为图 3所示的一种实施动态口令的认证方法的流程图; 图 5为图 3所示的另一种实施动态口令的认证方法的流程图; 图 6为本发明实施例四的动态口令的认证方法的流程图; 图 7为图 6所示的一种实施动态口令的认证方法的流程图; 图 8为图 6所示的另一种实施动态口令的认证方法的流程图; 图 9a-9h为图 3-5或图 6-8所示实施例中七种输出色块的示意图; 图 10为本发明实施例一的动态口令认证的***示意图; 图 11为本发明实施例二的动态口令认证的***示意图; 图 12为本发明实施例三的动态口令认证的***示意图。 具体实施方式 需要说明的是, 在不冲突的情况下, 本申请中的实施例及实施例中的特征可以相 互组合。 下面将参考附图并结合实施例来详细说明本发明。 实施例一 图 la-lb是根据本发明实施例一的动态口令的认证***的结构示意图。
如 la所示, 该动态口令的认证***包括: 服务器 2, 用于接收客户端 1发送的第 一信息, 根据第一信息生成第二信息, 并将第二信息中每一个传输位设置为对应的亮 度状态或颜色状态, 得到获取第三信息, 第三信息包括: 脉冲光信号的闪烁信息或动 态脉冲光信号的图像信息; 客户端 1, 用于接收第一信息并将第一信息发送至服务器, 并将从服务器 2接收到的第三信息转换为脉冲光信号并输出; 动态口令装置 3, 用于 接收脉冲光信号, 将接收到的脉冲光信号转换为中间信息, 提取部分或者全部中间信 息并将其转换为供用户察看的显示信息, 并将根据中间信息生成的第一动态口令; 其 中, 客户端 1接收到用户输入的第一动态口令并将其转发给服务器 2, 服务器 2验证 第一动态口令是否是合法, 在第一动态口令合法的情况下, 服务器 2执行用户操作。 本发明上述实施例的动态口令的认证***中, 客户端 1将用户信息发送给服务器
2, 服务器 2根据预定的转换方式将用户信息转化成脉冲光信号, 并发送至客户端 1 ; 客户端 1输出脉冲光信号; 动态口令装置 3采集脉冲光信号, 生成动态口令, 并将该 动态口令发送至服务器 2进行验证。 如图 lb所示, 该动态口令的认证***包括: 服务器 2, 用于接收客户端 1发送的 第一信息, 根据第一信息生成第二信息, 并将第二信息发送给客户端 1 ; 客户端 1, 用 于接收第一信息并将第一信息发送至服务器, 并将从服务器 2接收到的第二信息中每 一个传输位设置为对应的亮度状态或颜色状态, 得到第三信息, 所述第三信息包括: 脉冲光信号的闪烁信息或动态脉冲光信号的图像信息, 将第三信息转换为脉冲光信号 并输出; 动态口令装置 3, 用于接收脉冲光信号, 将接收到的脉冲光信号转换为中间 信息, 提取部分或者全部中间信息并将其转换为供用户察看的显示信息, 并将根据中 间信息生成的第一动态口令; 其中, 客户端 1接收到用户输入的第一动态口令并将其 转发给服务器 2, 服务器 2验证第一动态口令是否是合法, 在第一动态口令合法的情 况下, 服务器 2执行用户操作。 本发明上述实施例的动态口令的认证***中, 客户端 1将用户信息发送给服务器 2, 服务器 2将用户信息转换成第二信息并将第二信息返回给客户端 1 ; 客户端 1根据 预定的转换方式将第二信息转化成脉冲光信号并输出脉冲光信号; 动态口令装置 3采 集脉冲光信号, 生成动态口令, 并将该动态口令发送至服务器 2进行验证。 上述实施例采用非有线连接的传输方法将相关的用户信息传输给动态口令装置 3, 从而减少了现有相关技术中采用人工输入, 同时增加了大量信息的传输效率。具体 的, 上述实施利中的技术手段应用在网上交易时, 客户端 1通过非连接的传输方法将 相关的用户信息传输到动态口令装置 3并生成相应的动态口令, 该动态口令用于与服 务器 2生成的动态口令进行对比, 具有更高的安全性。 上述实施例一中的在服务器 2
端进行第一信号的处理, 客户端 1更多的是起到转发的功能。 本发明中的动态口令装 置 3需要用户信息作为变化因子参与生成动态口令。
实施例二 图 2是根据本发明实施例二的动态口令的认证***的结构示意图。 如图 2所示, 该动态口令的认证***还可以是另外一种实施方式, 该***包括: 客户端 1, 用于接 收第一信息, 根据第一信息生成第二信息, 并将第二信息中每一个传输位设置为对应 的亮度状态或颜色状态, 得到第三信息, 所述第三信息包括: 脉冲光信号的闪烁信息 或动态脉冲光信号的图像信息; 动态口令装置 3, 用于接收脉冲光信号, 并将其转换 为中间信息,提取部分或者全部中间信息并将其转换为供用户察看的显示信息并输出, 还将根据中间信息生成的第一动态口令返回给客户端 1 ; 其中, 客户端 1接收用户输 入的第一动态口令并将其转发至服务器 2, 服务器 2验证第一动态口令是否是合法, 在第一动态口令合法的情况下, 服务器 2执行用户操作。 本发明上述实施例的动态口令的认证***中, 采用非有线连接的传输方法将相关 的用户信息传输给动态口令装置 3, 从而减少了现有相关技术中采用人工输入, 同时 增加了大量信息的传输效率。 具体的, 上述实施利中的技术手段应用在网上交易时, 通过非连接的传输方法将相关的用户信息传输到动态口令装置 3并生成相应的动态口 令, 该动态口令用于同服务器 2生成的动态口令进行对比, 具有更高的安全性。 本发 明中的动态口令装置 3需要用户信息作为变化因子参与生成动态口令。 本发明上述实施例二中的客户端 1完成第一信息的转换处理过程, 比较实施例一 来说减轻了服务器 2端的工作量, 相对提高了工作效率。
实施例三 图 3是根据本发明实施例三的动态口令的认证方法的流程示意图, 如图 3所示该 方法包括如下步骤: 步骤 S10, 服务器 2接收客户端 1发送的第一信息, 并根据第一信息生成第二信 息。
步骤 S30, 服务器 2将第二信息中每一个传输位设置为对应的亮度状态或颜色状 态, 得到第三信息, 将第三信息发送给客户端 1, 第三信息包括: 脉冲光信号的闪烁 信息或动态脉冲光信号的图像信息; 或者 服务器 2将第二信息发送给客户端 1, 客户端 1接收第二信息, 并将第二信息中 每一个传输位设置为对应的亮度状态或颜色状态, 得到第三信息, 第三信息包括: 脉 冲光信号的闪烁信息或动态脉冲光信号的图像信息; 步骤 S50, 客户端 1将第三信息转换为脉冲光信号输出。 步骤 S70, 动态口令装置 3接收脉冲光信号时, 将其转换为中间信息, 动态口令 装置 3提取部分或者全部中间信息并将其转换为供用户察看的显示信息。 步骤 S90, 动态口令装置 3接收触发信息, 根据中间信息生成第一动态口令。 步骤 S110, 客户端 1接收用户输入的第一动态口令并将第一动态口令发送至服务 器 2。 步骤 S130, 服务器 2根据第二信息生成一个或一组第二动态口令, 并通过一个或 一组第二动态口令来验证第一动态口令是否合法; 如果第一动态口令与一个第二动态口令或一组第二动态口令中的任何一个第二动 态口令相同, 验证第一动态口令合法; 如果第一动态口令与一个第二动态口令或一组第二动态口令中的任何一个都不相 同, 验证第一动态口令不合法。 本发明上述实施例的动态口令的认证方法用非有线连接的传输方法将相关的用户 信息传输给动态口令装置 3, 从而减少了现有相关技术中采用人工输入, 同时增加了 大量信息的传输效率。 具体的, 上述实施利中的技术手段应用在网上交易时, 客户端 1通过非连接的传输方法将相关的用户信息传输到动态口令装置 3并生成相应的动态 口令, 该动态口令用于同服务器 2生成的动态口令进行对比, 具有更高的安全性。 上 述实施例三中的在服务器 2端进行第一信号的处理, 客户端 1更多的是起到转发的功 能。 本发明中的动态口令装置 3需要用户信息作为变化因子参与生成动态口令。 优选的, 本发明上述实施例中的步骤 S30中服务器 2将第二信息中每一个传输位 设置为对应的亮度状态, 得到第三信息, 具体包括: 服务器 2根据控制信号控制第二 信息中的每个传输位在预定区域内的亮度状态或颜色状态或颜色状态, 得到脉冲光信
号的闪烁信息; 或者服务器 2根据控制信号控制第二信息中的每个传输位在不同区域 中的亮度状态, 得到动态脉冲光信号的图像信息。 优选地, 动态口令装置 3接收脉冲光信号时, 将其转换为中间信息的步骤可以包 括: A. 在预定输出区域内采集所述脉冲光信号; B. 接收并识别所述脉冲光信号中的 一个字节数据; C.判断该字节数据是否为头部信息; 如果所述字节数据为头部信息, 执行 D; 如果所述字节数据不为头部信息, 返回 B; D. 接收并识别代表所述头部信 息之后的预设个字节数据的脉冲光信号, 将所述头部信息和所述预设个数字节数据进 行转换并组合, 得到一组中间信息; E. 接收到所有组中间信息后, 将所述所有组中 间信息进行组合。 动态口令装置 3接收脉冲光信号时, 将其转换为中间信息的另一种实现方式: 在 预定输出区域内采集所述脉冲光信号;接收并识别所述脉冲光信号中的所有字节数据; 将所有代表头部信息的字节数据和其后续预设个数字节数据进行组合, 得到一个新中 间信息, 将所有新中间信息进行组合得到一个组合中间信息; 将所有的组合中间信息 进行组合得到中间信息。 图 4是根据图 3所示的一种实施动态口令的认证方法的流程示意图。如图 4所示, 该本实施例提供了的一种详细的动态口令的生成方法, 具体包括如下步骤; 步骤 101 : 服务器 2接收客户端 1发送的第一信息, 根据第一信息生成第二信息; 本实施例中的第一信息包括用户识别码、 帐号信息、 金额和附加信息等; 用户识 别码用来识别用户的身份, 可以由用户自行修改; 附加信息为用户自行输入的一组信 息, 可以为任意长度的字符组合; 在本实施例中, 服务器 2端根据第一信息生成第二信息具体为: 服务器 2按照预先约定的方法, 从第一信息中提取预设信息, 根据预设信息生成 第二信息; 例 如 , 本 实 施 例 中 , 第 一 信 息 为 <?xml version="1.0" encoding= "UTF-8 " ?><T><D><M><k> ffi户识另 ij码: </k><v>123456</v></M><M><k> 账 号 信 息 : </k><v>l 1112222</v></Mx/D><E><M><k> 金 额 : </k><v>45600</v></M></Ex/T> 用户识别码: 123456;
账号信息: 11112222 ; 金额: 45600; 第一信息中还可以包括时间、 地点、 密码等作为预设数据。 服务器 2可以将预设信息作为第二信息, 也可以不提取预设信息, 直接将第一信 息作为第二信息; 还可以在预设信息的基础上添加其他信息, 生成第二信息。优选地, 在本实施例中, 服务器 2端提取预设信息, 并添加附加信息作为第二信息。 相应地, 服务器 2生成的第二信息为: 用户识别码: 123456; 账号信息: 11112222 ; 金额: 45600; 附加信息: 654321 ; 服务器 2将第二信息中的各信息分别进行分组转换, 形成的数据总包具体如下: a0 7 31 32 33 34 35 36 0 al 9 31 31 31 31 32 32 32 32 9 a2 6 34 35 36 30 30 22 a3 7 36 35 34 33 32 31 22 该数据总包中 a0、 al、 a2、 a3分别代表各数据包的头部信息, 根据头部信息可以 判断该组数据已进行接收。 本实施例步骤 101中, 头部信息还可以使用其他的 ASCII表中不可使用的字符来 表示, 避免了与传输的字节数据相混淆。 步骤 102:服务器 2对第二信息进行处理, 得到第三信息, 并将第三信息发送给客 户端 1 ; 上述步骤 102还可以替换为: 服务器 2将第二信息发送给客户端 1, 客户端 1对 第二信息进行处理得到第三信息; 客户端 1对第二信息进行处理得到第三信息的方法 与服务器 2对第二信息进行处理, 得到第三信息的方法相同。 步骤 103 : 客户端 1将第三信息转换为脉冲光信号输出; 步骤 104: 动态口令装置 3采集脉冲光信号, 对脉冲光信号进行预设处理转换成 中间信息, 并判断中间信息是否正确;
动态口令装置在预设的时间内对接收到的中间信息进行判断; 如果是, 则执行步骤 105 ; 如果否, 则执行步骤 111 ; 优选的, 动态口令装置 3通过感光元件对脉冲光信号进行接收, 位于动态口令装 置 3上的感光元件可以为 1个或者多个, 当感光元件为多个的时候, 其排列方式可以 为: 一行排列、 矩阵排列、 圆周排列等。 步骤 105 : 动态口令将组合后的中间信息转换成第四信息, 并输出第四信息; 具体的, 动态口令提取中间信息中的部分或者全部信息, 并将其转换成十进制数 值作为第四信息, 该第四信息是用户便于用户查看的显示信息。 需要说明的是, 本实施例中, 第四信息中包括用户的用户识别码、 帐号信息、 金 额和附加信息。 具体的, 步骤 106: 动态口令装置 3判断在预设时间内是否接收到用户输入的确认信息; 如果是, 则执行步骤 107; 如果否, 则执行步骤 111 ; 优选的, 在本实施例步骤 106中, 预设时间为 60秒。 步骤 107: 动态口令装置 3接收用户的确认信息, 根据中间信息生成第一动态口 令, 输出第一动态口令; 具体的, 动态口令装置 3生成动态口令的方法可以为: 动态口令装置 3将中间信 息作为第一动态因子, 采用内置的算法对第一动态因子和预先存储的第一静态因子进 行加密运算, 生成第一动态口令, 并将第一动态口令输出; 动态口令装置 3生成动态口令的方法还可以为: 动态口令装置 3将中间信息作为 第一动态因子, 采用内置的算法对第一动态因子、 当前时间因子 (或次数因子) 和预 先存储的第一静态因子进行加密运算, 生成第一动态口令, 并将第一动态口令输出;
步骤 108: 客户端 1接收用户输入的第一动态口令, 将第一动态口令发送给服务 器 2; 步骤 109: 服务器 2接收客户端 1发送的第一动态口令, 根据第二信息生成第二 动态口令; 服务器 2生成第二动态口令的方法与步骤 107中动态口令装置 3生成第一动态口 令的方法相同; 具体地, 在本实施例中, 服务器 2将内置的第二信息作为第二动态因子, 采用内 置的算法对第二动态因子和预先存储的第二静态因子进行加密运算, 生成第二动态口 令。 优选的, 服务器 2预先存储第二静态因子与动态口令装置 3中的第一静态因子相 同。 步骤 110: 服务器 2验证第二动态口令是否与客户端 1发送的第一动态口令相同; 如果是, 则执行用户操作; 如果否, 则执行步骤 112; 步骤 111 : 动态口令装置 3输出错误信息, 停止操作; 步骤 112: 服务器 2向客户端 1发送提示动态口令错误的信息, 客户端 1输出错 误信息。 优选的, 在本实施例中, 步骤 112还可以进行以下操作: 服务器 2向客户端 1发 送提示动态口令错误的信息, 客户端 1提示用户重新输入动态口令。 本实施例中, 第二动态口令还可以在步骤 102中记录脉冲光信号的生成时刻, 相 应地, 在生成第二动态口令之后, 服务器 2根据接收第一动态口令的时刻和脉冲光信 号的生成时刻计算时间差, 判断时间差是否在预设的时间差范围内; 如果是, 则执行 步骤 110; 否则执行步骤 111。 图 5是根据图 3所示的另一种实施动态口令的认证方法的流程示意图。 如图 5所 示, 该实施例提供了第二种详细的动态口令认证方法, 具体包括如下步骤; 步骤 201 : 服务器 2接收客户端 1发送的第一信息, 根据第一信息生成第二信息;
本实施例中的第一信息包括用户识别码、 帐号信息、 金额和附加信息等; 用户个 人识别码用来识别用户的身份, 可以由用户自行修改; 附加信息为用户自行输入的一 组信息, 可以为任意长度的字符组合; 服务器 2按照预先约定的方法, 从第一信息中提取预设信息, 根据预设信息生成 第二信息; 优选 的 , 本实施例 中 , 例 如 , 第 一信息 为 <?xml version="1.0" encoding= "UTF-8 " ?><T><D><M><k> ffi户识另 ij码: </k><v> 123456</v></M><M><k> 账 号 信 息 : </k><v>l 1112222</v></Mx/D><E><M><k> 金 额 : </k><v>45600</v></M></E></T>; 用户识别码: 123456; 账号信息: 11112222 ; 金额: 45600; 第一信息中还可以包括时间、 地点、 密码等作为预设数据。 服务器 2可以将预设信息作为第二信息, 也可以不提取预设信息, 直接将第一信 息作为第二信息; 还可以在预设信息的基础上添加其他信息, 生成第二信息。优选地, 在本实施例中, 服务器 2端提取预设信息, 并添加附加信息作为第二信息。 相应地, 服务器 2生成的第二信息为: 用户识别码: 123456; 账号信息: 11112222 ; 金额: 45600; 附加信息: 654321 ; 第二信息中还可以包括服务器 2产生的第一挑战码; 服务器 2将第二信息中的各信息分别进行分组转换, 形成的数据总包具体如下: a0 7 31 32 33 34 35 36 0 al 9 31 31 31 31 32 32 32 32 9 a2 6 34 35 36 30 30 22 a3 7 36 35 34 33 32 31 22
该数据总包中 a0、 al、 a2、 a3分别代表各数据包的头部信息, 根据头部信息可以 判断该组数据已进行接收。 本实施例步骤 201中, 头部信息还可以使用其他的 ASCII表中不可使用的字符来 表示, 避免了与传输的字节数据相混淆。 步骤 202:服务器 2对第二信息进行处理, 得到第三信息, 并将第三信息发送给客 户端 1 ; 上述步骤 202还可以替换为: 服务器 2将第二信息发送给客户端 1, 客户端 1对 第二信息进行处理得到第三信息; 客户端 1对第二信息进行处理得到第三信息的方法 与服务器 2对第二信息进行处理得到第三信息的方法相同。 本实施例中步骤 202具体的实现过程同实施例 1中的步骤 102; 在此不再赘述。 步骤 203 : 客户端 1将第三信息转换为脉冲光信号的形式输出; 本实施例中步骤 203具体的实现过程同实施例 1中的步骤 103 ; 在此不再赘述。 步骤 204: 动态口令装置 3采集脉冲光信号, 对脉冲光信号进行预设处理转换成 中间信息, 并判断中间信息是否正确; 动态口令装置在预设的时间内对接收到的中间信息进行判断; 优选的, 动态口令装置 3通过感光元件对脉冲光信号进行接收, 位于动态口令装 置 3上的感光元件可以为 1个或者多个, 当感光元件为多个的时候, 其排列方式可以 为: 一行排列、 矩阵排列、 圆周排列等。 如果是, 则执行步骤 205; 如果否, 则执行步骤 211 ; 动态口令装置 3采集脉冲光信号, 对脉冲光信号进行预设处理转换成中间信息, 并判断中间信息是否正确的第一方法具体同实施例 1中的步骤 104下动态口令装置 3 采集脉冲光信号, 对脉冲光信号进行预设处理转换成中间信息, 并判断中间信息是否 正确的第一方法, 在此不再赘述; 动态口令装置 3采集脉冲光信号, 对脉冲光信号进行预设处理转换成中间信息, 并判断中间信息是否正确的第二方法具体同实施例 1中的步骤 104下动态口令装置 3
采集脉冲光信号, 对脉冲光信号进行预设处理转换成中间信息, 并判断中间信息是否 正确的第二方法, 在此不再赘述。 步骤 205 : 动态口令装置将组合后的中间信息转换成第四信息, 并输出第四信息; 具体的, 动态口令装置提取中间信息中的部分或者全部信息, 将其转换成十进制 数值作为第四信息, 该第四信息是用户便于用户查看的显示信息。 需要说明的是, 本实施例中, 第四信息中包括用户的用户识别码、 帐号信息、 金 额和附加信息。 步骤 206: 动态口令装置 3判断在预设时间内是否接收到用户输入的确认信息; 如果是, 则执行步骤 207; 如果否, 则执行步骤 211 ; 优选的, 在本实施例步骤 206中, 预设时间为 60秒。 步骤 207: 动态口令装置 3接收用户的确认信息, 根据中间信息生成第三动态口 令, 输出第三动态口令; 具体的, 动态口令装置 3生成动态口令的方法可以为: 动态口令装置 3将中间三 信息作为第一动态因子, 采用内置的算法对第一动态因子、 第一附加动态因子和预先 存储的第一静态因子进行加密运算, 生成第三动态口令, 并将第三动态口令输出; 优选的,第一附加动态因子可以为时间因子、次数因子其中的一个; 如果步骤 202 中服务器 2发送给客户端 1的第二信息中包括第一挑战值, 则第一附加动态因子还可 以为第一挑战值, 也可以为第一挑战值和时间因子 (次数因子) 的组合; 本实施例中,第一挑战值是由服务器 2产生的并随第二信息一起发给客户端 1的, 客户端 1将第一挑战值以脉冲光信号的形式进行输出。 步骤 208: 客户端 1接收用户输入的第三动态口令, 将第三动态口令发送给服务 器 2; 步骤 209: 服务器 2接收客户端 1发送的第三动态口令, 根据第二信息生成第一 组动态口令;
服务器 2生成第一组动态口令的方法与步骤 207中动态口令装置 3生成第三动态 口令的方法相同; 具体地, 在本实施例中, 服务器 2将内置的第二信息作为第二动态因子, 根据第 二附加动态因子在预先约定的范围内增减, 并采用内置的算法对第二动态因子、 第二 附加动态因子和预先存储的第二静态因子进行加密运算, 生成第一组动态口令; 动态口令装置 3生成动态口令的方法还可以为: 动态口令装置 3将中间信息作为 第一动态因子, 采用内置的算法对第一动态因子、 当前时间因子 (次数因子) 和预先 存储的第一静态因子进行加密运算, 生成第一动态口令, 并将第一动态口令输出; 第二附加动态因子与生成第三动态口令时所用的第一附加动态因子相同, 服务器 2预先存储第二静态因子与动态口令装置 3中的第一静态因子相同。 步骤 210: 服务器 2验证第一组动态口令中是否与有与客户端 1发送的第三动态 口令相同的动态口令; 如果是, 则验证通过, 执行用户操作; 如果否, 则执行步骤 212; 步骤 211 : 动态口令装置 3输出错误信息, 停止操作; 步骤 212: 服务器 2向客户端 1发送提示动态口令错误的信息, 客户端 1输出错 误信息。 优选的, 在本实施例中, 步骤 212还可以进行以下操作: 服务器 2向客户端 1发 送提示动态口令错误的信息, 客户端 1提示用户重新输入动态口令。 具体地, 本发明上述图 4所提供的实施例中步骤 102、 步骤 103和步骤 104的详 细实施方式具体如下: 步骤 102:服务器 2对第二信息进行处理, 得到第三信息, 并将第三信息发送给客 户端 1 ; 服务器 2对第二信息进行处理的第一方法, 具体包括: 服务器 2通过预先约定的 数据处理模式, 将第二信息的每一位进行映射处理, 并由服务器 2的控制信息控制客 户端 1在输出区域内根据不同的传输位输出不同的亮度状态;
例如: 当传输位为 " 1 "时, 服务器 2控制客户端 1输出的状态为第一亮度, 当传 输位为 "0" 时, 服务器 2控制客户端 1输出的状态为第二亮度; 本方法中, 第三信息包括第二信息和控制信息; 控制信息用于控制脉冲光信号的 闪烁。 服务器 2对第二信息进行处理的第二方法, 具体包括: 服务器 2按照预先约定的数据处理模式, 预先根据传输位的不同设置不同的亮度 状态将所要传输的第二信息映射为动态脉冲光信号图像; 例如: 当传输位为 " 1 "时, 服务器 2控制动态脉冲光信号图像对应的色块输出的 状态为第一亮度, 当传输位为 " 0"时, 服务器 2控制动态脉冲光信号图像对应的色块 输出的状态为第二亮度; 服务器 2根据传输位的不同将所要传输的第二信息映射为动 态脉冲光信号图像。 需要说明的是, 动态脉冲光信号图像的格式可以为 GIF等多种动态图像格式; 具体的, 服务器 2映射的动态脉冲光信号图像分为两种形式: 第一种形式为动态脉冲光信号图像中只包含单个亮度色块: 第二信息中数据以串行输出的方式进行输出, 为了区分每一字节的数据开始输出 和输出完毕, 服务器 2根据预定方法, 在动态脉冲光信号图像将数据串行输出的闪烁 过程中还包括输出开始指令和结束指令; 开始指令代表一字节的数据开始输出, 在开 始指令结束后开始输出数据, 结束指令代表该字节的数据输出完毕; 开始指令和结束指令为服务器 2和动态口令装置 3约定好的按相同方法设定的。 第二种形式为动态脉冲光信号图像中包含多个亮度色块; 该多个色块中包括两部分, 控制色块和数据输出色块; 其中, 控制色块为时钟信 号色块时, 作用是控制数据输出色块的输出同步, 并控制在时钟上升沿 (下降沿) 的 时候输出一个 (组) 数据; 为了区分每一字节的数据开始输出和输出完毕, 服务器 2 根据预定方法, 在数据输出色块将一个 (组) 数据进行输出的闪烁过程中 (时钟信号 色块输出时钟信号过程中) 还包括输出开始指令和结束指令; 开始指令代表一字节的 数据开始输出, 在开始指令结束后开始输出数据, 结束指令代表该字节的数据输出完 毕; 如果数据输出为四位并行传输, 只需在时钟信号下降 (上升) 沿时刻输出一个字 节的高四位, 时钟信号上升 (下降) 沿时刻输出低四位即可达到技术效果; 如果数据
输出为八位并行传输, 只需在时钟信号下降 (上升) 沿时刻同时输出一个字节的数据 即可达到技术效果; 控制色块为差分信号色块时, 差分信号色块的作用是分别对第一亮度和第二亮度 进行采样, 用以设定并输出在客户端 1屏幕亮度不同时的临界亮度值; 服务器 2根据 预先约定的方法, 当输出状态亮度高于 (低于) 临界亮度值, 则输出状态视为 "第一 亮度", 低于 (高于) 临界亮度值则输出状态视为 "第二亮度", 低于临界亮度值则输 出状态视为 "第一亮度值"; 差分信号色块能够在客户端 1屏幕很暗的情况下, 使得 动态口令装置 3更加准确的接收并识别出光信号的状态; 为了区分每一字节的数据开 始输出和输出完毕, 服务器 2根据预定方法, 在数据输出色块将一个 (组) 数据进行 输出的闪烁过程中 (差分信号色块输出时钟信号过程中) 还包括输出开始指令和结束 指令; 开始指令代表一字节的数据开始输出, 在开始指令结束后开始输出数据, 结束 指令代表该字节的数据输出完毕; 如果数据输出为八位并行传输, 只需在差分信号输 出临界亮度值同时输出一个字节的数据即可达到技术效果; 本方法中, 第三信息为动态脉冲光信号图像。 步骤 103 : 客户端 1接收到第三信息, 将其转换为脉冲光信号的形式输出; 本实施例中, 针对步骤 102中服务器 2对第二信息进行处理的第一方法, 客户端 1接收到第三信息,将其转换为脉冲光信号的形式输出的第一方法具体包括: 客户端 1 受控制信息的控制, 输出区域根据控制信息和位输出不同的亮度状态; 例如: 当传输 位为 " 1 " 时, 客户端 1输出的状态为第一亮度, 当传输位为 "0" 时, 客户端 1输出 的状态为第二亮度; 具体的, 客户端 1脉冲光信号进行输出时分为两种形式: 第一种形式为脉冲光信号中只包含单个亮度色块: 第二信息中数据以串行输出的方式进行输出, 为了区分每一字节的数据开始输出 和输出完毕, 客户端 1根据控制信息的控制, 在动态脉冲光信号图像将数据串行输出 的闪烁过程中还包括输出开始指令和结束指令;开始指令代表一字节的数据开始输出, 在开始指令结束后开始输出数据, 结束指令代表该字节的数据输出完毕; 开始指令和结束指令为客户端 1和动态口令装置 3约定好的按相同方法设定的。 第二种形式为脉冲光信号中包含多个亮度色块;
客户端 1根据控制信息的控制, 将控制信息映射为控制色块; 该多个色块中就包 括两部分, 控制色块和数据输出色块; 其中, 控制色块为时钟信号色块时, 作用是控 制数据输出色块的输出同步, 并控制在时钟上升沿(下降沿) 的时候输出下一个(组) 数据; 为了区分每一字节的数据开始输出和输出完毕, 客户端 1根据预定方法, 在数 据输出色块将一个 (组) 数据进行输出的闪烁过程中 (时钟信号色块输出时钟信号过 程中) 还包括输出开始指令和结束指令; 开始指令代表一字节的数据开始输出, 在开 始指令结束后开始输出数据, 结束指令代表该字节的数据输出完毕; 如果数据输出为 四位并行传输, 只需在时钟信号下降 (上升) 沿时刻输出一个字节的高四位, 时钟信 号上升(下降)沿时刻输出低四位即可达到技术效果; 如果数据输出为八位并行传输, 只需在时钟信号下降 (上升) 沿时刻同时输出一个字节的数据即可达到技术效果; 控制色块为差分信号色块时, 差分信号色块的作用是分别对第一亮度和第二亮度 进行采样, 用以设定并输出在客户端 1屏幕亮度不同时的临界亮度值; 客户端 1根据 预先约定的方法, 当输出状态亮度高于 (低于) 临界亮度值, 则输出状态视为 "第一 亮度", 低于 (高于) 临界亮度值则输出状态视为 "第二亮度", 低于临界亮度值则输 出状态视为 "第一亮度值"; 差分信号色块能够在客户端 1屏幕很暗的情况下, 输出 中间亮度值, 使得动态口令装置 3更加准确的接收并识别出光信号的状态; 为了区分 每一字节的数据开始输出和输出完毕, 客户端 1根据预定方法, 在数据输出色块将一 个 (组) 数据进行输出的闪烁过程中 (差分信号色块输出时钟信号过程中) 还包括输 出开始指令和结束指令; 开始指令代表一字节的数据开始输出, 在开始指令结束后开 始输出数据, 结束指令代表该字节的数据输出完毕; 如果数据输出为八位并行传输, 只需在差分信号输出临界亮度值同时输出一个字节的数据即可达到技术效果; 需要说明的是, 服务器 2针对不同分辨率的客户端 1显示器, 映射的输出色块可 以以多种形态来体现, 以适合动态口令装置 3在不同分辨率的显示器上接收脉冲光信 号。 参见图 9a-9h, 为输出色块的不同体现形式; 需要说明的是, 该图只是事例性的, 输出区域的色块形状不限于附图, 可以为任意形状; 针对步骤 102中服务器 2对第二信息进行处理的第二方法,户端接收到第三信息, 将其转换为脉冲光信号的形式输出的第二方法具体包括: 客户端 1将动态脉冲光信号 图像输出到客户端 1屏幕的某一区域; 需要说明的是, 显示动态脉冲光信号图像的区域是随机的, 也可以是固定的。
步骤 104: 动态口令装置 3采集脉冲光信号, 对脉冲光信号进行预设处理转换成 中间信息, 并判断中间信息是否正确; 动态口令装置在预设的时间内对接收到的中间信息进行判断; 优选的, 动态口令装置 3通过感光元件对脉冲光信号进行接收, 位于动态口令装 置 3上的感光元件可以为 1个或者多个, 当感光元件为多个的时候, 其排列方式可以 为: 一行排列、 矩阵排列、 圆周排列等。 如果是, 则执行步骤 105 ; 如果否, 则执行步骤 111 ; 动态口令装置 3采集脉冲光信号, 对脉冲光信号进行预设处理转换成中间信息, 并判断中间信息是否正确的第一方法具体包括: 步骤 1104-1 : 动态口令装置 3在脉冲光信号的输出区域选择适合动态口令装置 3 采集脉冲光信号的位置采集脉冲光信号; 步骤 1104-2: 动态口令装置 3接收并识别到一字节的数据; 具体的, 方法 1 : 如果客户端 1输出脉冲光信号为第一种形式即只包含单个亮度 色块, 则动态口令装置 3根据预先设置的方法, 先对开始指令进行接收, 并通过结束 指令来得知该字节数据接收完毕,再按照与服务器 2相同的预先约定的数据处理模式, 对接收到的脉冲光信号进行识别; 例如: 当接收到的状态为第一亮度时, 识别为传输 位 " 1 ", 当接收到的状态为第二亮度时, 识别为传输位 "0"; 方法 2: 如果客户端 1输出脉冲光信号为第二种形式即包含多个亮度色块, 且控 制色块为时钟信号色块, 则动态口令装置 3与时钟信号色块输出的时钟信号同步接收 脉冲光信号, 并根据数据输出色块输出数据的方法来根据时钟信号的上升沿(下降沿) 来接收数据; 如果接收到输出的指令, 则根据指令类型来判断开始指令和结束指令, 进而接收到该字节数据;动态口令装置 3还可以根据预设方法,则在时钟信号下降(上 升) 沿接收一个字节 (半个字节) 的数据; 方法 3 : 如果客户端 1输出脉冲光信号为第二种形式即包含多个亮度色块, 且控 制色块为差分信号色块, 则动态口令装置 3根据差分信号色块输出的临界亮度值来判 断接收的脉冲光信号的亮度状态, 再根据输出脉冲光信号先对开始指令进行接收, 并 通过结束指令来得知该字节数据接收完毕, 再按照与服务器 2相同的预先约定的数据
处理模式, 对接收到的脉冲光信号进行识别, 得到该字节数据; 动态口令装置 3还可 以根据预设方法, 在接收差分信号输出临界亮度值时接收该字节的数据; 步骤 1104-3 : 动态口令装置 3判断该字节数据是否为一个头部信息; 如果否, 则执行步骤 1104-2; 如果是, 则执行步骤 1104-4; 动态口令装置 3判断该字节数据是否为一个头部信息是通过判断该字节数据是否 为 ASCII表中不可使用的字符来实现的; 如果为 ASCII表中不可使用的字符, 则视为 头部信息; 需要说明的是, 如果动态口令装置在预设的时间内未判断出代表头部信息的字节 数据, 则动态口令超时退出。 步骤 1104-4: 动态口令装置 3接收包含该头部信息的一组中间信息, 并判断该组 中间信息是否正确; 动态口令装置 3接收头部信息之后的预设个字节数据, 并将头部信息和后续的预 设个字节数据进行组合得到一组中间信息; 如果否, 则执行步骤 1104-2; 如果是, 则执行步骤 1104-5; 具体的, 动态口令装置 3通过判断该组中间信息的校验位来得知该组中间信息是 否正确; 步骤 1104-5: 动态口令装置 3存储该组中间信息, 并判断是否已识别并存储了到 全部的中间信息; 如果否, 则执行步骤 1104-2; 如果是, 则执行步骤 1104-6; 步骤 1104-6: 动态口令装置 3将全部的中间信息进行组合; 动态口令装置 3采集脉冲光信号, 对脉冲光信号进行预设处理转换成中间信息, 并判断中间信息是否正确的第二方法具体包括:
步骤 1204-1 : 动态口令装置 3在脉冲光信号的输出区域选择适合动态口令装置 3 采集脉冲光信号的位置采集脉冲光信号; 步骤 1204-2: 动态口令装置 3接收并识别到所有数据, 并根据头部信息将所有数 据分为多组的中间信息; 动态口令装置 3接收并识别到所有数据后, 按照预先设置的方法将所有数据组成 字节数据, 再将判断为头部信息的字节数据以及其后预设个字节数据组合成多个数据 包, 即得到多组中间信息; 动态口令装置 3接收并识别到所有数据的方法如下: 具体的, 方法 1 : 如果客户端 1输出脉冲光信号为第一种形式即只包含单个亮度 色块, 则动态口令装置 3根据预先设置的方法, 先对开始指令进行接收, 并通过结束 指令来得知该字节数据接收完毕,再按照与服务器 2相同的预先约定的数据处理模式, 对接收到的脉冲光信号进行识别; 例如: 当接收到的状态为第一亮度时, 识别为传输 位 " 1 ", 当接收到的状态为第二亮度时, 识别为传输位 "0"; 同理直至接收全部数 据; 方法 2: 如果客户端 1输出脉冲光信号为第二种形式即包含多个亮度色块, 且控 制色块为时钟信号色块, 则动态口令装置 3与时钟信号色块输出的时钟信号同步接收 脉冲光信号, 并根据数据输出色块输出数据的方法来根据时钟信号来接收数据; 如果 接收到输出的指令, 则根据指令类型来判断开始指令和结束指令, 进而接收到该字节 数据; 动态口令装置 3还可以根据预设方法, 则在时钟信号下降 (上升) 沿接收一个 字节 (半个字节) 的数据; 同理直至接收全部数据; 方法 3 : 如果客户端 1输出脉冲光信号为第二种形式即包含多个亮度色块, 且控 制色块为差分信号色块, 则动态口令装置 3根据差分信号色块输出的临界亮度值来判 断接收的脉冲光信号的亮度状态, 再根据输出脉冲光信号先对开始指令进行接收, 并 通过结束指令来得知该字节数据接收完毕, 再按照与服务器 2相同的预先约定的数据 处理模式, 对接收到的脉冲光信号进行识别, 得到该字节数据; 动态口令装置 3还可 以根据预设方法, 在接收差分信号输出临界亮度值时接收该字节的数据; 同理直至接 收全部数据; 动态口令装置 3通过判断某字节数据是否为 ASCII表中不可使用的字符来判断该 字节数据为头部信息。
步骤 1204-3 : 动态口令装置 3依次判断每一组中间信息是否正确; 如果至少有一组中间信息不正确, 则执行步骤 1204-4; 如果所有组的中间信息都正确, 则执行步骤 1204-5 ; 具体的, 动态口令装置 3通过判断每一组中间信息的校验位来得知该组中间信息 是否正确; 步骤 1204-4: 动态口令装置 3继续接收并识别未通过判断的剩余中间信息; 执行 步骤 1204-3 ; 步骤 1204-5 : 动态口令装置 3将全部的中间信息进行组合。 本实施例中, 第一亮度为较亮的亮度, 第二亮度为较暗的亮度, 当亮度值高于亮 值界限的时候视为第一亮度, 当亮度值低于暗值界限的时候视为第二亮度; 或者第一 亮度为暗亮的亮度, 第二亮度为较亮的亮度, 当亮度值高于亮值界限的时候视为第一 亮度, 当亮度值低于暗值界限的时候视为第二亮度。
实施例四 图 6是根据本发明实施例四的动态口令的认证方法的流程图。 如图 6所示该方法 包括如下步骤: 步骤 S20, 客户端 1获取第一信息, 并根据第一信息生成第二信息。 步骤 S40, 客户端 1将第二信息中每一个传输位设置为对应的亮度状态或颜色状 态, 得到第三信息, 第三信息包括: 脉冲光信号的闪烁信息或动态脉冲光信号的图像 信息。 步骤 S60, 客户端 1将第三信息转换为脉冲光信号输出。 步骤 S80, 动态口令装置 3接收脉冲光信号时, 将其转换为中间信息, 动态口令 装置 3提取部分或者全部中间信息并将其转换为供用户察看的显示信息。 步骤 S100, 动态口令装置 3接收触发信息, 根据中间信息生成第一动态口令。
步骤 S120,客户端 1接收用户输入的第一动态口令并将第一动态口令和第二信息 发送至服务器 2。 步骤 S140, 服务器 2根据第二信息生成一个或一组第二动态口令, 并通过一个或 一组第二动态口令来验证第一动态口令是否合法; 如果第一动态口令与一个第二动态口令或一组第二动态口令中的任何一个第二动 态口令相同, 验证第一动态口令合法; 如果第一动态口令与一个第二动态口令或一组第二动态口令中的任何一个第二动 态口令都不相同, 验证第一动态口令不合法。 本发明上述实施例的动态口令的认证方法用非有线连接的传输方法将相关的用户 信息传输给动态口令装置 3, 从而减少了现有相关技术中采用人工输入, 同时增加了 大量信息的传输效率。 具体的, 上述实施利中的技术手段应用在网上交易时, 客户端 1通过非连接的传输方法将相关的用户信息传输到动态口令装置 3并生成相应的动态 口令, 该动态口令用于同服务器 2生成的动态口令进行对比, 具有更高的安全性。 上 述实施例四中的在客户端 1进行第一信号的处理, 动态口令装置 3需要用户信息作为 变化因子参与生成动态口令, 上述实施例四中的客户端 1完成第一信息的转换处理过 程, 比较实施例三来说减轻了服务器 2端的工作量, 相对提高了工作效率。 上述实施例中的步骤 S40客户端 1将第二信息中每一个传输位设置为对应的亮度 状态或颜色状态, 得到第三信息包括: 客户端 1根据控制信号控制第二信息中的每个 传输位在预定区域内的亮度状态或颜色状态, 得到脉冲光信号的闪烁信息; 或者客户 端客户端 1根据控制信号控制第二信息中的每个传输位在不同区域中的亮度状态或颜 色状态, 得到动态脉冲光信号的图像信息。 本发明上述实施例中, 在步骤 S80动态口令装置 3接收脉冲光信号时, 将其转换 为中间信息可以包括: Α' . 在预定输出区域内采集所述脉冲光信号; Β ' . 接收并识别 所述脉冲光信号中的一个字节数据; C.判断该字节数据是否为头部信息; 如果所述字 节数据为头部信息, 执行 D' ; 如果所述字节数据不为头部信息, 返回 B ' 继续接受 并识别字节数据; D' . 接收并识别代表所述头部信息之后的预设个数字节数据的脉冲 光信号, 将所述头部信息和所述预设个数字节数据进行转换并组合, 得到一组中间信 息; Ε' . 接收到所有组的中间信息后, 将所有组中间信息进行组合。 动态口令装置 3接收脉冲光信号时,将其转换为中间信息的另一种方式可以包括: 在预定输出区域内采集脉冲光信号; 接收并识别脉冲光信号中的所有字节数据, 转换
得到所有组中间信息; 接收并识别脉冲光信号中的所有字节数据; 将所有代表头部信 息的字节数据和其后续预设个数字节数据进行组合, 得到每组中间信息, 将每组中间 信息进行组合得到得到所有组中间信息; 将所有组中间信息进行组合。 图 7是根据图 6所示的一种实施动态口令的认证方法的流程示意图。 步骤 301 : 客户端 1接收客户端 1发送的第一信息, 根据第一信息生成第二信息; 本实施例中的第一信息包括用户识别码、 帐号信息、 金额和附加信息等; 用户个 人识别码用来识别用户的身份, 可以由用户自行修改; 附加信息为用户自行输入的一 组信息, 可以为任意长度的字符组合; 客户端 1按照预先约定的方法, 从第一信息中提取预设信息, 根据预设信息生成 第二信息; 优选 的 , 本实施例 中 , 例 如 , 第 一信息 为 <?xml version="1.0" encoding= "UTF-8 " ?><T><D><M><k> ffi户识另 ij码: </k><v> 123456</v></M><M><k> 账 号 信 息 : </k><v>l 1112222</v></Mx/D><E><M><k> 金 额 : </k><v>45600</v></M></Ex/T> 用户识别码: 123456; 账号信息: 11112222 ; 金额: 45600; 第一信息中还可以包括时间、 地点、 密码等作为预设信息。 客户端 1可以将预设信息作为第二信息, 也可以不提取预设信息, 直接将第一信 息作为第二信息; 还可以在预设信息的基础上添加其他信息, 生成第二信息。优选地, 在本实施例中, 客户端 1端提取预设信息, 并添加附加信息作为第二信息。 相应地, 客户端 1生成的第二信息为: 用户识别码: 123456; 账号信息: 11112222 ; 金额: 45600; 附加信息: 654321 ;
客户端 1将第二信息中的各信息分别进行分组转换, 形成的数据总包具体如下: a0 7 31 32 33 34 35 36 0 al 9 31 31 31 31 32 32 32 32 9 a2 6 34 35 36 30 30 22 a3 7 36 35 34 33 32 31 22 该数据总包中 a0、 al、 a2、 a3分别代表各数据包的头部信息, 根据头部信息可以 判断该组数据已进行接收。 本实施例步骤 301中, 头部信息还可以使用其他的 ASCII表中不可使用的字符来 表示, 避免了与传输的字节数据相混淆。 步骤 302: 客户端 1对第二信息进行处理, 得到第三信息; 步骤 303 : 客户端 1将第三信息转换成脉冲光信号进行输出; 步骤 304: 动态口令装置 3采集脉冲光信号, 对脉冲光信号进行预设处理转换成 中间信息, 并判断中间信息是否正确; 动态口令装置在预设的时间内对接收到的中间信息进行判断; 优选的, 动态口令装置 3通过感光元件对脉冲光信号进行接收, 位于动态口令装 置 3上的感光元件可以为 1个或者多个, 当感光元件为多个的时候, 其排列方式可以 为: 一行排列、 矩阵排列、 圆周排列等。 如果是, 则执行步骤 305 ; 如果否, 则执行步骤 311 ; 动态口令装置 3采集脉冲光信号, 对脉冲光信号进行预设处理转换成中间信息, 并在预设的时间内判断中间信息是否正确的第一方法具体同实施例 1中的步骤 104下 动态口令装置 3采集脉冲光信号, 对脉冲光信号进行预设处理转换成中间信息, 并判 断中间信息是否正确的第一方法, 在此不再赘述; 动态口令装置 3采集脉冲光信号, 对脉冲光信号进行预设处理转换成中间信息, 并在预设的时间内判断中间信息是否正确的第二方法具体同实施例 1中的步骤 104下 动态口令装置 3采集脉冲光信号, 对脉冲光信号进行预设处理转换成中间信息, 并判 断中间信息是否正确的第二方法, 在此不再赘述。 步骤 305 : 动态口令装置将组合后的中间信息转换成第四信息, 并输出第四信息;
具体的, 动态口令装置提取中间信息中的部分或者全部信息, 将其转换成十进制 数值作为第四信息; 该第四信息是用户便于用户查看的显示信息。 需要说明的是, 本实施例中, 第四信息中包括用户的用户识别码、 帐号数据、 金 额和附加数据。 步骤 306: 动态口令装置 3判断在预设时间内是否接收到用户输入的确认信息; 如果是, 则执行步骤 307; 如果否, 则执行步骤 311 ;; 优选的, 在本实施例步骤 306中, 预设时间为 60秒。 步骤 307: 动态口令装置 3接收用户的确认信息, 根据中间信息生成第五动态口 令, 输出第五动态口令; 具体的, 动态口令装置 3生成动态口令的方法可以为: 动态口令装置 3将中间信 息作为第三动态因子, 采用内置的算法对第三动态因子和预先存储的第一静态因子进 行加密运算, 生成第五动态口令, 并将第五动态口令输出; 步骤 308: 客户端 1接收用户输入的第五动态口令, 将第五动态口令和第二信息 发送给服务器 2; 步骤 309: 服务器 2接收客户端 1发送的第五动态口令和第二信息, 根据第二信 息生成第六动态口令; 服务器 2生成第六动态口令的方法与步骤 307中动态口令装置 3生成第五动态口 令的方法相同; 优选的, 服务器 2预先存储第二静态因子与动态口令装置 3中的第一静态因子相 同。 步骤 310: 服务器 2验证第六动态口令是否与有与客户端 1发送的第五动态口令 相同; 如果是, 则验证通过, 执行用户操作; 如果否, 则执行步骤 312;
步骤 311 : 动态口令装置 3输出错误信息, 停止操作; 步骤 312: 服务器 2向客户端 1发送提示动态口令错误的信息, 客户端 1输出错 误信息。 优选的, 在本实施例中, 步骤 312还可以进行以下操作: 服务器 2向客户端 1发 送提示动态口令错误的信息, 客户端 1提示用户重新输入动态口令。 图 8是根据图 6所示的另一种实施动态口令的认证方法的流程图。 如图 8所示, 该第四种动态口令的生成方法流程图, 具体包括如下步骤; 步骤 401 : 客户端 1接收第一信息, 根据第一信息生成第二信息; 本实施例中的第一信息包括用户识别码、 帐号数据、 金额和附加数据等; 用户个 人识别码用来识别用户的身份, 可以由用户自行修改; 附加数据为用户自行输入的一 组数据, 可以为任意长度的字符组合; 服务器 2按照预先约定的方法, 从第一信息中提取预设信息, 根据预设信息生成 第二信息; 优选 的 , 本实施例 中 , 例 如 , 第 一信息 为 <?xml version="1.0" encoding= "UTF-8 " ?><T><D><M><k> ffi户识另 ij码: </k><v>123456</v></M><M><k> 账 号 信 息 : </k><v>l 1112222</v></Mx/D><E><M><k> 金 额 : </k><v>45600</v></M></Ex/T> 用户识别码: 123456; 账号信息: 11112222 ; 金额: 45600; 第一信息中还可以包括时间、 地点、 密码等作为预设信息。 服务器 2可以将预设信息作为第二信息, 也可以不提取预设信息, 直接将第一信 息作为第二信息; 还可以在预设信息的基础上添加其他信息, 生成第二信息。优选地, 在本实施例中, 服务器 2端提取预设信息, 并添加附加信息作为第二信息。 相应地, 服务器 2生成的第二信息为: 用户识别码: 123456;
账号信息: 11112222 ; 金额: 45600; 附加信息: 654321 ; 服务器 2将第二信息中的各信息分别进行分组转换, 形成的数据总包具体如下: aO 7 31 32 33 34 35 36 0 al 9 31 31 31 31 32 32 32 32 9 a2 6 34 35 36 30 30 22 a3 7
36 35 34 33 32 31 22 该数据总包中 a0、 al、 a2、 a3分别代表各数据包的头部信息, 根据头部信息可以 判断该组数据已进行接收。 本实施例步骤 401中, 头部信息还可以使用其他的 ASCII表中不可使用的字符来 表示, 避免了与传输的字节数据相混淆。 步骤 402:客户端 1对第二信息进行处理, 得到第三信息; 本实施例中步骤 402具体的实现过程同实施例 3中的步骤 302; 在此不再赘述。 步骤 403 : 客户端 1将第三信息转换成脉冲光信号进行输出; 本实施例中步骤 403具体的实现过程同实施例 3中的步骤 303 ; 在此不再赘述。 步骤 404: 动态口令装置 3采集脉冲光信号, 对脉冲光信号进行预设处理转换成 中间信息, 并判断中间信息是否正确; 动态口令装置在预设的时间内对接收到的中间信息进行判断; 优选的, 动态口令装置 3通过感光元件对脉冲光信号进行接收, 位于动态口令装 置 3上的感光元件可以为 1个或者多个, 当感光元件为多个的时候, 其排列方式可以 为: 一行排列、 矩阵排列、 圆周排列等。 如果是, 则执行步骤 405 ; 如果否, 则执行步骤 411 ; 动态口令装置 3采集脉冲光信号, 对脉冲光信号进行预设处理转换成中间信息, 并判断中间信息是否正确的第一方法具体同实施例 1中的步骤 104下动态口令装置 3
采集脉冲光信号, 对脉冲光信号进行预设处理转换成中间信息, 并判断中间信息是否 正确的第一方法, 在此不再赘述; 动态口令装置 3采集脉冲光信号, 对脉冲光信号进行预设处理转换成中间信息, 并判断中间信息是否正确的第二方法具体同实施例 1中的步骤 104下动态口令装置 3 采集脉冲光信号, 对脉冲光信号进行预设处理转换成中间信息, 并判断中间信息是否 正确的第二方法, 在此不再赘述。 步骤 405 : 动态口令装置将组合后的中间信息转换成第四信息, 并输出第四信息; 具体的, 动态口令装置提取中间信息中的部分或者去全部信息, 将其转换成十进 制数值作为第四信息; 该第四信息是用户便于用户查看的显示信息。 需要说明的是, 本实施例中, 第四信息中包括用户的用户识别码、 帐号数据、 金 额和附加数据。 步骤 406: 动态口令装置 3判断在预设时间内是否接收到用户输入的确认信息; 如果是, 则执行步骤 407; 如果否, 则执行步骤 411 ; 优选的, 在本实施例步骤 406中, 预设时间为 60秒。 步骤 407: 动态口令装置 3接收用的确认信息, 根据中间信息生成第七动态口令, 输出第七动态口令; 具体的, 动态口令装置 3生成动态口令的方法可以为: 动态口令装置 3将中间信 息作为第三动态因子, 采用内置的算法对第三动态因子、 第三附加动态因子和预先存 储的第一静态因子进行加密运算, 生成第七动态口令, 并将第七动态口令输出; 优选的, 第三附加动态因子可以为时间因子、 次数因子其中一个。 步骤 408: 客户端 1接收用户输入的第七动态口令, 将第七动态口令和第二信息 发送给服务器 2; 步骤 409: 服务器 2接收客户端 1发送的第七动态口令和第二信息, 根据第二信 息生成第二组动态口令;
服务器 2生成第二组动态口令的方法与步骤 407中动态口令装置 3生成第七动态 口令的方法相同; 具体地, 在本实施例中, 服务器 2将内置的第二信息作为第四动态因子, 并根据 当前第四附加动态因子, 在预先约定的范围内增减, 并采用内置的算法对第四动态因 子、 第四附加动态因子和预先存储的第二静态因子进行加密运算, 生成第二组动态口 令; 第四附加动态因子与生成第七动态口令时所用的第三附加动态因子相同; 优选的, 服务器 2预先存储第二静态因子与动态口令装置 3中的第一静态因子相 同。 步骤 410: 服务器 2验证第二组动态口令中是否有与客户端 1发送的第七动态口 令相同的动态口令; 如果是, 则验证成功, 执行用户操作; 如果否, 则执行步骤 412; 步骤 411 : 动态口令装置 3输出错误信息, 停止操作; 步骤 412: 服务器 2向客户端 1发送提示动态口令错误的信息, 客户端 1输出错 误信息; 优选的, 在本实施例中, 步骤 412还可以进行以下操作服务器 2向客户端 1发送 提示动态口令错误的数据, 客户端 1提示用户重新输入口令。 本实施例 4中, 步骤 407至步骤 409还可以替换为步骤 407'至步骤 409' : 步骤 407' :动态口令装置 3接收用的确认信息,根据第三信息生成第七动态口令, 输出第七动态口令和第二数值; 具体的, 动态口令装置 3生成动态口令的方法可以为: 动态口令装置 3将第三信 息作为第三动态因子, 采用内置的算法对第三动态因子、 第三附加动态因子和预先存 储的第一静态因子进行加密运算, 生成第七动态口令, 并将第七动态口令输出; 优选的, 第三附加动态因子可以第二数值, 还可以为第二数值和时间因子的组合
(或次数因子) 的组合;
步骤 408' :客户端 1接收用户输入的第七动态口令和第二数值,将第七动态口令、 第二数值和第二信息发送给服务器 2; 步骤 409' : 服务器 2接收客户端 1发送的第七动态口令、 第二数值和第二信息, 根据第二信息和第二数值生成第二组动态口令; 服务器 2生成第二组动态口令的方法与步骤 407中动态口令装置 3生成第七动态 口令的方法相同; 具体地, 在本实施例中, 服务器 2将内置的第二信息作为第四动态因子, 并根据 当前第四附加动态因子, 在预先约定的范围内增减, 并采用内置的算法对第四动态因 子、 第四附加动态因子和预先存储的第二静态因子进行加密运算, 生成第二组动态口 令; 第四附加动态因子与生成第七动态口令时所用的第三附加动态因子相同; 优选的, 服务器 2预先存储第二静态因子与动态口令装置 3中的第一静态因子相 同。 具体地, 本发明上述图 7和图 8所提供的实施例中步骤 302、 步骤 303的详细实 施方式如下: 步骤 302:客户端 1对第二信息进行处理, 得到第三信息; 客户端 1对第二信息进行处理的第一方法, 具体包括: 客户端 1通过预先约定的 数据处理模式, 将第二信息的每一位进行映射处理, 并由客户端 1控制输出区域根据 不同的传输位输出不同的亮度状态; 例如: 当传输位为 " 1 "时, 客户端 1控制客户端 1输出的状态为第一亮度, 当传 输位为 "0" 时, 客户端 1控制客户端 1输出的状态为第二亮度; 本方法中, 第三信息为第二信息。 客户端 1对第二信息进行处理的第二方法, 具体包括: 客户端 1按照预先约定的数据处理模式, 预先根据传输位的不同设置不同的亮度 状态, 将所要传输的第二信息映射为动态脉冲光信号图像;
例如: 当传输位为 " 1 "时, 客户端 1控制动态脉冲光信号图像对应的色块输出的 状态为第一亮度, 当传输位为 " 0"时, 客户端 1控制动态脉冲光信号图像对应的色块 输出的状态为第二亮度; 客户端 1根据传输位的不同将所要传输的第二信息映射为动 态脉冲光信号图像。 需要说明的是, 动态脉冲光信号图像的格式可以为 GIF等多种动态图像格式; 具体的, 客户端 1映射的动态脉冲光信号图像分为两种形式: 第一种形式为动态脉冲光信号图像中只包含单个亮度色块: 第二信息中数据以串行输出的方式进行输出, 为了区分每一字节的数据开始输出 和输出完毕, 客户端 1根据预定方法, 在动态脉冲光信号图像将数据串行输出的闪烁 过程中还包括输出开始指令和结束指令; 开始指令代表一字节的数据开始输出, 在开 始指令结束后开始输出数据, 结束指令代表该字节的数据输出完毕; 开始指令和结束指令为客户端 1和动态口令装置 3约定好的按相同方法设定的。 第二种形式为动态脉冲光信号图像中包含多个亮度色块; 该多个色块中包括两部分, 控制色块和数据输出色块; 其中, 控制色块为时钟信 号色块时, 作用是控制数据输出色块的输出同步, 并控制在时钟上升沿 (下降沿) 的 时候输出一个 (组) 数据; 为了区分每一字节的数据开始输出和输出完毕, 客户端 1 根据预定方法, 在数据输出色块将一个 (组) 数据进行输出的闪烁过程中 (时钟信号 色块输出时钟信号过程中) 还包括输出开始指令和结束指令; 开始指令代表一字节的 数据开始输出, 在开始指令结束后开始输出数据, 结束指令代表该字节的数据输出完 毕; 如果数据输出为四位并行传输, 只需在时钟信号下降 (上升) 沿时刻输出一个字 节的高四位, 时钟信号上升 (下降) 沿时刻输出低四位即可达到技术效果; 如果数据 输出为八位并行传输, 只需在时钟信号下降 (上升) 沿时刻同时输出一个字节的数据 即可达到技术效果; 控制色块为差分信号色块时, 差分信号色块的作用是分别对第一亮度和第二亮度 进行采样, 用以设定并输出在客户端 1屏幕亮度不同时的临界亮度值; 客户端 1根据 预先约定的方法, 当输出状态亮度高于 (低于) 临界亮度值, 则输出状态视为 "第一 亮度", 低于 (高于) 临界亮度值则输出状态视为 "第二亮度", 低于临界亮度值则输 出状态视为 "第一亮度值"; 差分信号色块能够在客户端 1屏幕很暗的情况下, 使得 动态口令装置 3更加准确的接收并识别出光信号的状态; 为了区分每一字节的数据开
始输出和输出完毕, 客户端 1根据预定方法, 在数据输出色块将一个 (组) 数据进行 输出的闪烁过程中 (差分信号色块输出时钟信号过程中) 还包括输出开始指令和结束 指令; 开始指令代表一字节的数据开始输出, 在开始指令结束后开始输出数据, 结束 指令代表该字节的数据输出完毕; 如果数据输出为八位并行传输, 只需在差分信号输 出临界亮度值同时输出一个字节的数据即可达到技术效果; 本方法中, 第三信息为动态脉冲光信号图像。 步骤 303 : 客户端 1将第三信息转换成脉冲光信号进行输出; 本实施例中, 针对步骤 302中客户端 1对第二信息进行处理的第一方法, 客户端 1接收到第三信息,将其转换为脉冲光信号的形式输出的第一方法具体包括: 客户端 1 控制输出区域根据控制信息和位输出不同的亮度状态; 例如: 当传输位为 " 1 "时, 客 户端 1输出的状态为第一亮度, 当传输位为" 0"时,客户端 1输出的状态为第二亮度; 具体的, 客户端 1脉冲光信号进行输出时分为两种形式: 第一种形式为脉冲光信号中只包含单个亮度色块: 第二信息中数据以串行输出的方式进行输出, 为了区分每一字节的数据开始输出 和输出完毕, 客户端 1控制动态脉冲光信号图像在数据串行输出的闪烁过程中还包括 输出开始指令和结束指令; 开始指令代表一字节的数据开始输出, 在开始指令结束后 开始输出数据, 结束指令代表该字节的数据输出完毕; 开始指令和结束指令为客户端 1和动态口令装置 3约定好的按相同方法设定的。 第二种形式为脉冲光信号中包含多个亮度色块; 客户端 1将控制脉冲光信号输出的控制信息映射为控制色块; 该多个色块中就包 括两部分, 控制色块和数据输出色块; 其中, 控制色块为时钟信号色块时, 作用是控 制数据输出色块的输出同步, 并控制在时钟上升沿(下降沿) 的时候输出下一个(组) 数据; 为了区分每一字节的数据开始输出和输出完毕, 客户端 1根据预定方法, 在数 据输出色块将一个 (组) 数据进行输出的闪烁过程中 (时钟信号色块输出时钟信号过 程中) 还包括输出开始指令和结束指令; 开始指令代表一字节的数据开始输出, 在开 始指令结束后开始输出数据, 结束指令代表该字节的数据输出完毕; 如果数据输出为 四位并行传输, 只需在时钟信号下降 (上升) 沿时刻输出一个字节的高四位, 时钟信 号上升(下降)沿时刻输出低四位即可达到技术效果; 如果数据输出为八位并行传输, 只需在时钟信号下降 (上升) 沿时刻同时输出一个字节的数据即可达到技术效果;
控制色块为差分信号色块时, 差分信号色块的作用是分别对第一亮度和第二亮度 进行采样, 用以设定并输出在客户端 1屏幕亮度不同时的临界亮度值; 客户端 1根据 预先约定的方法, 当输出状态亮度高于 (低于) 临界亮度值, 则输出状态视为 "第一 亮度", 低于 (高于) 临界亮度值则输出状态视为 "第二亮度", 低于临界亮度值则输 出状态视为 "第一亮度值"; 差分信号色块能够在客户端 1屏幕很暗的情况下, 输出 中间亮度值, 使得动态口令装置 3更加准确的接收并识别出光信号的状态; 为了区分 每一字节的数据开始输出和输出完毕, 客户端 1根据预定方法, 在数据输出色块将一 个 (组) 数据进行输出的闪烁过程中 (差分信号色块输出时钟信号过程中) 还包括输 出开始指令和结束指令; 开始指令代表一字节的数据开始输出, 在开始指令结束后开 始输出数据, 结束指令代表该字节的数据输出完毕; 如果数据输出为八位并行传输, 只需在差分信号输出临界亮度值同时输出一个字节的数据即可达到技术效果; 需要说明的是, 客户端 1针对不同分辨率的客户端 1显示器, 映射的输出色块可 以以多种形态来体现, 以适合动态口令装置 3在不同分辨率的显示器上接收脉冲光信 号。 本实施例中, 第一亮度为较亮的亮度, 第二亮度为较暗的亮度, 当亮度值高于亮 值界限的时候视为第一亮度, 当亮度值低于暗值界限的时候视为第二亮度; 或者第一 亮度为暗亮的亮度, 第二亮度为较亮的亮度, 当亮度值高于亮值界限的时候视为第一 亮度, 当亮度值低于暗值界限的时候视为第二亮度。 参见图 9a-9h, 为输出色块的不同体现形式; 需要说明的是, 该图只是事例性的, 输出区域的色块形状不限于附图, 可以为任意形状; 针对步骤 302中客户端 1对第二信息进行处理的第二方法, 客户端 1接将第三信 息其转换为脉冲光信号的形式输出的第二方法具体包括: 客户端 1将动态脉冲光信号 图像输出到客户端 1屏幕的某一区域; 需要说明的是, 显示动态脉冲光信号图像的区域是随机的, 也可以是固定的。 在本发明所有的实施例中, 动态脉冲光信号的输出形式还可以为在预设区域内输 出不同的颜色亮度; 不同的颜色亮度代表不同的传输位; 动态口令装置 3接收动态脉 冲光信号之后根据预先约定的接收方法,对不同的颜色亮度进行识别, 的到中间信息。 图 10为本发明实施例一的动态口令认证的***示意图, 包括服务器 20、 客户端 10和动态口令装置 30; 具体为:
服务器 20包括: 第一接收模块 201, 用于接收客户端 10发送的第一信息和第一动态口令; 第一生成模块 202, 用于根据第一信息生成第二信息; 第一设置模块 203, 用于将第二信息中每一个传输位设置为对应的亮度状态或颜 色状态, 得到第三信息; 第一发送模块 204, 用于将第一设置模块 203中的第三信息发送给客户端 10; 第一口令生成模块 205, 用于根据第二信息生成一个或一组第二动态口令; 验证模块 206, 用于通过一个或一组第二动态口令来验证第一动态口令是否合法; 客户端 10包括: 第二发送模块 101, 用于向服务器 20发送第一信息和第一动态口令; 第二接收模块 102, 用于接收第一信息和第一动态口令, 还用于接收服务器 20发 送的第三信息; 转换输出模块 103, 用于将第三信息转换为脉冲光信号输出; 动态口令装置 30包括: 第三接收模块 301, 用于接收客户端 10输出的脉冲光信号和触发信息; 识别转换模块 302, 用于对第三接收模块 301接收的脉冲光信号进行识别并将其 转换为中间信息; 提取模块 303, 用于提取识别转换模块 302中的部分或者全部中间信息, 并将其 转换为供用户察看的显示信息; 输出模块 304, 用于输出提取模块 303转换的显示信息和第一动态口令; 第二口令生成模块 305, 用于根据中间信息生成第一动态口令。 图 11 为是本发明实施例二的动态口令认证的***示意图, 包括服务器 21、 客户 端 11和动态口令装置 31 ; 具体为: 服务器 21包括:
第一接收模块 211, 用于接收客户端 11发送的第一信息和第一动态口令; 第一生成模块 212, 用于根据第一信息生成第二信息; 第一发送模块 213, 用于将第一生成模块 212生成的第二信息发送给客户端 11 ; 第一口令生成模块 214, 用于根据第二信息生成一个或一组第二动态口令; 验证模块 215, 用于通过一个或一组第二动态口令来验证第一动态口令是否合法; 客户端 11包括: 第二发送模块 111, 用于向服务器 21发送第一信息和第一动态口令; 第二接收模块 112, 用于接收第一信息和第一动态口令, 还用于接收服务器 21发 送的第二信息; 第二设置模块 113, 用于将第二信息中每一个传输位设置为对应的亮度状态或颜 色状态, 得到第三信息; 转换输出模块 114, 用于将第三信息转换为脉冲光信号输出; 动态口令装置 31包括: 第三接收模块 311, 用于接收客户端 11输出的脉冲光信号和触发信息; 识别转换模块 312, 用于将第三接收模块 311接收的脉冲光信号进行识别并将其 转换为中间信息; 提取模块 313, 用于提取识别转换模块 312中的部分或者全部中间信息, 并将其 转换为供用户察看的显示信息; 输出模块 314, 用于输出提取模块 313转换的显示信息和第一动态口令; 第二口令生成模块 315, 用于根据中间信息生成第一动态口令。 图 12为本发明实施例三的动态口令认证的***示意图, 包括服务器 22、 客户端 12和动态口令装置 32; 具体为: 服务器 22包括: 第一接收模块 221, 用于接收客户端 12发送的第一动态口令和第二信息;
第一口令生成模块 222, 用于根据第二信息生成一个或一组第二动态口令; 验证模块 223, 用于通过一个或一组第二动态口令来验证第一动态口令是否合法; 客户端 12包括: 第二接收模块 121, 用于接收第一信息和第一动态口令; 第一生成模块 122, 用于根据第一信息生成第二信息; 第一发送模块 123, 用于将第二信息和第一动态口令发送给服务器 22; 第一设置模块 124, 用于将第二信息中每一个传输位设置为对应的亮度状态或颜 色状态, 得到第三信息; 转换输出模块 125, 用于将第三信息转换为脉冲光信号输出; 动态口令装置 32包括: 第三接收模块 321, 用于接收脉冲光信号和触发信息; 识别转换模块 322, 用于将第三接收模块 321接收的脉冲光信号进行识别并将其 转换为中间信息; 提取模块 323, 用于提取识别转换模块 322中的部分或者全部中间信息, 并将其 转换为供用户察看的显示信息; 输出模块 324, 用于输出提取模块 323转换的显示信息和第一动态口令; 第二口令生成模块 325, 用于根据中间信息生成第一动态口令。 需要说明的是, 在附图的流程图示出的步骤可以在诸如一组计算机可执行指令的 计算机***中执行, 并且, 虽然在流程图中示出了逻辑顺序, 但是在某些情况下, 可 以以不同于此处的顺序执行所示出或描述的步骤。 本申请还可以包括运行上述动态口令认证方法的实施利的计算机程序, 以及保存 该计算机程序的存储器。 从以上的描述中, 可以看出, 本发明实现了如下技术效果: 采用非有线连接的传 输方法将相关的用户信息传输给动态口令装置 3, 从而减少了现有相关技术中采用人 工输入, 同时增加了大量信息的传输效率, 具有更高的安全性。
显然, 本领域的技术人员应该明白, 上述的本发明的各模块或各步骤可以用通用 的计算装置来实现, 它们可以集中在单个的计算装置上, 或者分布在多个计算装置所 组成的网络上, 可选地, 它们可以用计算装置可执行的程序代码来实现, 从而, 可以 将它们存储在存储装置中由计算装置来执行, 或者将它们分别制作成各个集成电路模 块, 或者将它们中的多个模块或步骤制作成单个集成电路模块来实现。 这样, 本发明 不限制于任何特定的硬件和软件结合。 以上所述仅为本发明的优选实施例而已, 并不用于限制本发明, 对于本领域的技 术人员来说, 本发明可以有各种更改和变化。 凡在本发明的精神和原则之内, 所作的 任何修改、 等同替换、 改进等, 均应包含在本发明的保护范围之内。
Claims
1. 一种动态口令的认证方法, 其特征在于, 包括:
服务器接收客户端发送的第一信息, 并根据所述第一信息生成第二信息; 所述服务器将所述第二信息中每一个传输位设置为对应的亮度状态或颜色 状态, 得到第三信息, 将所述第三信息发送给所述客户端, 所述第三信息包括: 脉冲光信号的闪烁信息或动态脉冲光信号的图像信息;
所述客户端将所述第三信息转换为脉冲光信号输出;
所述动态口令装置接收并识别所述脉冲光信号, 将其转换为中间信息, 所 述动态口令装置提取部分或者全部所述中间信息并将其转换为供用户察看的显 示信息并输出;
所述动态口令装置接收触发信息, 根据所述中间信息生成第一动态口令; 所述客户端接收用户输入的所述第一动态口令并将所述第一动态口令发送 至所述服务器;
所述服务器根据所述第二信息生成一个或一组第二动态口令, 并通过所述 一个或一组第二动态口令来验证所述第一动态口令是否合法;
如果所述第一动态口令与所述一个第二动态口令或一组第二动态口令中的 任何一个第二动态口令相同, 验证所述第一动态口令合法;
如果所述第一动态口令与所述一个第二动态口令或一组第二动态口令中的 任何一个第二动态口令都不相同, 验证所述第一动态口令不合法。
2. 根据权利要求 1所述的方法, 其特征在于, 所述服务器将所述第二信息中每一 个传输位设置为对应的亮度状态或颜色状态, 得到第三信息包括:
所述服务器根据控制信号控制所述第二信息中的每个传输位在预定区域内 的亮度状态或颜色状态, 得到所述脉冲光信号的闪烁信息; 或者
所述服务器根据控制信号控制所述第二信息中的每个传输位在不同区域中 的亮度状态或颜色状态, 得到所述动态脉冲光信号的图像信息。
3. 根据权利要求 2所述的方法, 其特征在于, 所述动态口令装置接收并识别所述 脉冲光信号, 将其转换为中间信息包括:
A. 在预定输出区域内采集所述脉冲光信号;
B. 接收并识别所述脉冲光信号中的一个字节数据;
C. 判断所述字节数据是否为头部信息;
如果所述字节数据为头部信息, 执行 D;
如果所述字节数据不为头部信息, 返回 B;
D. 接收并识别代表所述头部信息之后的预设个字节数据的脉冲光信号, 将所述头部信息和所述预设个数字节数据进行转换并组合, 得到一组合中间信 息;
E. 接收到所有的组合中间信息后, 将所述所有的组合中间信息进行组合 生成中间信息。
4. 根据权利要求 2所述的方法, 其特征在于, 所述动态口令装置接收并识别所述 脉冲光信号, 将其转换为中间信息包括:
在预定输出区域内采集所述脉冲光信号;
接收并识别所述脉冲光信号中的所有字节数据;
将所有代表头部信息的字节数据和其后续预设个数字节数据进行组合, 得 到所有的组合中间信息;
将所述所有的组合中间信息进行组合生成中间信息。
5. 根据权利要求 3所述的方法, 其特征在于, 在将所述所有的组合中间信息进行 组合生成中间信息之前包括:
所述动态口令装置在预设时间内判断接收的所有的组合中间信息是否均正 确;
如果在预设时间内判断接收的所有的组合中间信息均正确, 将所有的组合 中间信息进行组合生成中间信息;
如果在预设时间内判断出接收的所有的组合中间信息中有不正确的, 所述 动态口令装置输出错误信息;
所述动态口令装置在预设时间内判断接收的所有的组合中间信息是否均正 确包括:
所述动态口令装置判断接收到的组合中间信息是否正确;
如果所述组合中间信息正确, 所述动态口令装置判断是否已接收到所有判 断正确的组合中间信息;
如果接收到所述所有判断正确的组合中间信息, 所述动态口令装置将所述 所有判断正确的组合中间信息进行组合;
如果未接收到所述所有判断正确的组合中间信息, 返回 B;
如果该所述组合中间信息不正确, 判断是否到达预设时间, 如到达预设时 间, 所述动态口令装置输出错误信息, 如未到达预设时间, 返回 B。
6. 根据权利要求 4所述的方法, 其特征在于, 在将所述所有的组合中间信息进行 组合生成中间信息之前包括:
所述动态口令装置在预设时间内判断接收的所有的组合中间信息是否均正 确;
如果在预设时间内判断接收的所有的组合中间信息均正确, 将所有的组合 中间信息进行组合生成中间信息;
如果在预设时间内判断出接收的所有的组合中间信息有不正确的, 所述动 态口令装置输出错误信息;
所述动态口令装置在预设时间内判断接收的所有的组合中间信息是否均正 确包括:
a. 所述动态口令装置依次判断所有组合中间信息是否均正确; 如果每组组合中间信息均正确, 执行 b;
如果至少有一组组合中间信息不正确, 执行 c;
b. 所述动态口令装置将所有组合中间信息进行组合生成中间信息; c 所述动态口令装置判断是否到达预设时间, 如到达预设时间, 则输出错 误信息, 如未到达预设时间, 则继续接收未通过判断的组合中间信息, 执行 a。
7. 一种动态口令的认证方法, 其特征在于, 包括:
服务器接收客户端发送的第一信息, 并根据所述第一信息生成第二信息; 所述服务器将所述第二信息发送给所述客户端, 所述客户端接收所述第二 信息, 并将所述第二信息中每一个传输位设置为对应的亮度状态或颜色状态, 得到第三信息, 所述第三信息包括: 脉冲光信号的闪烁信息或动态脉冲光信号 的图像信息;
所述客户端将所述第三信息转换为脉冲光信号输出;
所述动态口令装置接收并识别所述脉冲光信号, 将其转换为中间信息, 所 述动态口令装置提取部分或者全部中间信息并将其转换为供用户察看的显示信 息并输出;
所述动态口令装置接收触发信息, 根据所述中间信息生成第一动态口令; 所述客户端接收用户输入的所述第一动态口令并将所述第一动态口令发送 至所述服务器;
所述服务器根据所述第二信息生成一个或一组第二动态口令, 并通过所述 一个或一组第二动态口令来验证所述第一动态口令是否合法;
如果所述第一动态口令与所述一个第二动态口令或一组第二动态口令中的 任何一个第二动态口令相同, 验证所述第一动态口令合法;
如果所述第一动态口令与所述一个第二动态口令或一组第二动态口令中的 任何一个第二动态口令都不相同, 验证所述第一动态口令不合法。
8. 根据权利要求 7所述的方法, 其特征在于, 所述客户端接收所述第二信息, 并 将所述第二信息中每一个传输位设置为对应的亮度状态或颜色状态, 得到第三 信息, 包括:
所述客户端接收到所述第二信息后, 根据控制信号控制所述第二信息中的 每个传输位在预定区域内的亮度状态或颜色状态, 得到所述脉冲光信号的闪烁 信息; 或者
所述客户端接收到所述第二信息后, 根据控制信号控制所述第二信息中的 每个传输位在不同区域中的亮度状态或颜色状态, 得到所述动态脉冲光信号的 图像信息。
9. 根据权利要求 8所述的方法, 其特征在于, 所述动态口令装置接收并识别所述 脉冲光信号, 将其转换为中间信息, 包括:
A. 在预定输出区域内采集所述脉冲光信号;
B. 接收并识别所述脉冲光信号中的一个字节数据;
C. 判断所述字节数据是否为头部信息;
如果所述字节数据为头部信息, 执行 D;
如果所述字节数据不为头部信息, 返回 B;
D. 接收并识别代表所述头部信息之后的预设个字节数据的脉冲光信号, 将所述头部信息和所述预设个数字节数据进行转换并组合, 得到一组组合中间 信息;
E. 接收到所有的组合中间信息后, 将所述所有的组合中间信息进行组合 生成中间信息。
10. 根据权利要求 8所述的方法, 其特征在于, 所述动态口令装置接收并识别所述 脉冲光信号, 将其转换为中间信息, 包括:
在预定输出区域内采集所述脉冲光信号;
接收并识别所述脉冲光信号中的所有字节数据;
将所有代表头部信息的字节数据和其后续预设个数字节数据进行组合, 得 到所有的组合中间信息;
将所述所有的组合中间信息进行组合生成中间信息。
11. 根据权利要求 9所述的方法, 其特征在于, 在将所述所有的组合中间信息进行 组合生成中间信息之前包括:
所述动态口令装置在预设时间内判断接收的所有的组合中间信息是否均正 确;
如果在预设时间内判断接收的所有的组合中间信息均正确, 将所有的组合 中间信息进行组合生成中间信息;
如果在预设时间内判断出接收的所有的组合中间信息中有不正确的, 所述 动态口令装置输出错误信息;
所述动态口令装置在预设时间内判断接收的所有的组合中间信息是否均正 确包括:
所述动态口令装置判断接收到的组合中间信息是否正确;
如果所述组合中间信息正确, 所述动态口令装置判断是否已接收到所有的 判断正确的组合中间信息;
如果接收到所述所有的判断正确的组合中间信息, 所述动态口令装置将所 有的判断正确的组合中间信息进行组合;
如果未接收到所述所有的判断正确的组合中间信息, 返回 B;
如果所述组合中间信息不正确,判断是否到达预设时间,如到达预设时间, 所述动态口令装置输出错误信息, 如未到达预设时间, 返回 B。
12. 根据权利要求 10所述的方法,其特征在于,在将所述所有的组合中间信息进行 组合生成中间信息之前包括:
所述动态口令装置在预设时间内判断接收的所有的组合中间信息是否均正 确;
如果在预设时间内判断接收的所有的组合中间信息均正确, 将所有的组合 中间信息进行组合生成中间信息;
如果在预设时间内判断出接收的所有的组合中间信息有不正确的, 所述动 态口令装置输出错误信息;
所述动态口令装置在预设时间内判断接收的所有的组合中间信息是否均正 确包括:
a. 所述动态口令装置依次判断所有组合中间信息是否均正确; 如果每组组合中间信息均正确, 执行 b;
如果至少有一个组合中间信息不正确, 执行 c;
b. 所述动态口令装置将所有组合中间信息进行组合生成中间信息; c 所述动态口令装置判断是否到达预设时间, 如到达预设时间, 则输出错 误信息, 如未到达预设时间, 则继续接收未通过判断的组合中间信息, 执行 a。
13. 一种动态口令的认证方法, 其特征在于, 包括:
客户端接收第一信息, 并根据所述第一信息生成第二信息;
所述客户端将所述第二信息中每一个传输位设置为对应的亮度状态或颜色 状态, 得到第三信息, 所述第三信息包括: 脉冲光信号的闪烁信息或动态脉冲 光信号的图像信息;
所述客户端将所述第三信息转换为脉冲光信号输出;
所述动态口令装置接收所述脉冲光信号, 将其转换为中间信息, 所述动态 口令装置提取部分或者全部中间信息并将其转换为供用户察看的显示信息并输 出;
所述动态口令装置接收触发信息, 根据所述中间信息生成第一动态口令;
所述客户端接收用户输入的所述第一动态口令并将所述第一动态口令和第 二信息发送至所述服务器;
所述服务器根据所述第二信息生成一个或一组第二动态口令, 并通过所述 一个或一组第二动态口令来验证所述第一动态口令是否合法;
如果所述第一动态口令与所述一个第二动态口令或一组第二动态口令中的 任何一个第二动态口令相同, 验证所述第一动态口令合法;
如果所述第一动态口令与所述一个第二动态口令或一组第二动态口令中的 任何一个第二动态口令都不相同, 验证所述第一动态口令不合法。
14. 根据权利要求 13所述的方法, 其特征在于, 所述客户端将所述第二信息中每一个 传输位设置为对应的亮度状态或颜色状态, 得到第三信息包括:
所述客户端根据控制信号控制所述第二信息中的每个传输位在预定区域内 的亮度状态或颜色状态, 得到所述脉冲光信号的闪烁信息; 或者
所述客户端根据控制信号控制所述第二信息中的每个传输位在不同区域中 的亮度状态或颜色状态, 得到所述动态脉冲光信号的图像信息。
15. 根据权利要求 14所述的方法,其特征在于,所述动态口令装置接收所述脉冲光 信号并将其转换为中间信息包括:
Α' . 在预定输出区域内采集所述脉冲光信号;
Β' . 接收并识别所述脉冲光信号中的一个字节数据;
C 判断所述字节数据是否为头部信息;
如果所述字节数据为头部信息, 执行 D' ;
如果所述字节数据不为头部信息, 返回 Β' ;
D' . 接收并识别代表所述头部信息之后的预设个数字节数据的脉冲光信 号, 将所述头部信息和所述预设个数字节数据进行转换并组合, 得到一个组合 中间信息;
Ε' . 接收到所有的组合中间信息后, 将所述所有的组合中间信息进行组合 生成中间信息。
16. 根据权利要求 14所述的方法,其特征在于,所述动态口令装置接收所述脉冲光 信号并将其转换为中间信息包括:
在预定输出区域内采集所述脉冲光信号;
接收并识别所述脉冲光信号中的所有字节数据;
将所有代表头部信息的字节数据和其后续预设个数字节数据进行组合, 得 到所有的组合中间信息;
将所述所有的组合中间信息进行组合生成中间信息。
17. 根据权利要求 15所述的方法,其特征在于,在将所述所有的组合中间信息进行 组合生成中间信息之前包括:
所述动态口令装置在预设时间内判断接收的所有的组合中间信息是否均正 确;
如果在预设时间内判断接收的所有的组合中间信息均正确, 将所有的组合 中间信息进行组合生成中间信息;
如果在预设时间内判断出接收的所有的组合中间信息中有不正确的, 所述 动态口令装置输出错误信息;
所述动态口令装置在预设时间内判断接收的所有的组合中间信息是否均正 确包括:
所述动态口令装置判断接收到的组合中间信息是否正确;
如果所述组合中间信息正确, 所述动态口令装置判断是否已接收到所有的 判断正确的组合中间信息;
如果接收到所述所有的判断正确的组合中间信息, 所述动态口令装置将所 述所有判断正确的组合中间信息进行组合;
如果未接收到所述所有判断正确的组合中间信息, 返回 Β' ;
如果所述组合中间信息不正确,判断是否到达预设时间,如到达预设时间, 所述动态口令装置输出错误信息, 如未到达预设时间, 返回 Β'。
18. 根据权利要求 16所述的方法,其特征在于,在将所述所有的组合中间信息进行 组合生成中间信息之前包括:
所述动态口令装置在预设时间内判断接收的所有的组合中间信息是否均正 确;
如果在预设时间内判断接收的所有的组合中间信息均正确, 将所有的组合 中间信息进行组合生成中间信息;
如果在预设时间内判断出接收的所有的组合中间信息中有不正确的, 所述 动态口令装置输出错误信息;
所述动态口令装置在预设时间内判断接收的所有的组合中间信息是否均正 确包括:
a' . 所述动态口令装置依次判断所有组合中间信息是否均正确; 如果每组组合中间信息均正确, 执行 b' ;
如果至少有一组组合中间信息不正确, 执行 c' ;
b' . 所述动态口令装置将所述所有组合中间信息进行组合生成组合中间信 息;
C . 所述动态口令装置判断是否到达预设时间, 如到达预设时间, 则输出 错误信息, 如未到达预设时间, 则继续接收未通过判断的剩余组合中间信息, 执行 a'。 一种动态口令的认证***, 其特征在于, 包括: 服务器、 客户端和动态口令装 置;
其中,
所述服务器用于接收所述客户端发送的第一信息和第一动态口令, 根据所 述第一信息生成第二信息, 并将所述第二信息中每一个传输位设置为对应的亮 度状态或颜色状态, 得到第三信息, 将所述第三信息发送给所述客户端, 同时, 根据所述第二信息生成一个或一组第二动态口令, 并通过所述一个或一组第二 动态口令来验证所述第一动态口令是否合法;
所述客户端用于向所述服务器发送所述第一信息和所述第一动态口令, 并 接收所述服务器发送的所述第三信息,将所述第三信息转换为脉冲光信号输出; 所述动态口令装置用于接收所述客户端输出的所述脉冲光信号和触发信 息, 对所述脉冲光信号进行识别并将其转换为中间信息, 根据所述中间信息生 成所述第一动态口令, 在提取到部分或者全部所述中间信息之后, 将其转换为 供用户察看的显示信息, 并输出所述提取模块转换的所述显示信息和所述第一 动态口令。 一种动态口令的认证***, 其特征在于, 包括: 服务器、 客户端和动态口令装 置;
其中,
所述服务器用于接收所述客户端发送的第一信息和第一动态口令, 根据所 述第一信息生成第二信息,并根据所述第二信息生成一个或一组第二动态口令, 通过所述一个或一组第二动态口令来验证所述第一动态口令是否合法, 并将所 述第二信息发送给所述客户端;
所述客户端用于向所述服务器发送所述第一信息和所述第一动态口令, 并 接收所述服务器发送的所述第二信息, 将所述第二信息中每一个传输位设置为 对应的亮度状态或颜色状态, 得到第三信息, 将所述第三信息转换为脉冲光信 号输出;
所述动态口令装置用于接收所述客户端输出的所述脉冲光信号和触发信 息, 对所述脉冲光信号进行识别并将其转换为中间信息, 根据所述中间信息生 成所述第一动态口令, 在提取到部分或者全部所述中间信息之后, 将其转换为 供用户察看的显示信息, 并输出所述提取模块转换的所述显示信息和所述第一 动态口令。
21. 一种动态口令的认证***, 其特征在于, 包括: 服务器、 客户端和动态口令装 置;
其中,
所述服务器用于接收所述客户端发送的第一动态口令和第二信息, 根据所 述第二信息生成一个或一组第二动态口令, 并通过所述一个或一组第二动态口 令来验证所述第一动态口令是否合法;
所述客户端用于接收所述第一信息和用户输入的所述第一动态口令, 根据 所述第一信息生成所述第二信息, 将所述第二信息和所述第一动态口令发送给 所述服务器, 并在将所述第二信息中每一个传输位设置为对应的亮度状态或颜 色状态, 得到第三信息之后, 将所述第三信息转换为脉冲光信号输出;
所述动态口令装置用于接收所述脉冲光信号和触发信息, 对接收的脉冲光 信号进行识别并将其转换为中间信息, 根据所述中间信息生成所述第一动态口 令,在提取到部分或者全部中间信息之后,将其转换为供用户察看的显示信息, 并输出所述提取模块转换的所述显示信息和所述第一动态口令。
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US13/806,298 US9386013B2 (en) | 2011-11-24 | 2011-12-27 | Dynamic password authentication method and system thereof |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201110379449.XA CN102377784B (zh) | 2011-11-24 | 2011-11-24 | 动态口令的认证方法及*** |
CN201110379449.X | 2011-11-24 |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2013075380A1 true WO2013075380A1 (zh) | 2013-05-30 |
Family
ID=45795742
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/CN2011/084750 WO2013075380A1 (zh) | 2011-11-24 | 2011-12-27 | 动态口令的认证方法及*** |
Country Status (3)
Country | Link |
---|---|
US (1) | US9386013B2 (zh) |
CN (1) | CN102377784B (zh) |
WO (1) | WO2013075380A1 (zh) |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN110958247A (zh) * | 2019-12-01 | 2020-04-03 | 成都华迈通信技术有限公司 | 一种网关设备数据传输***及数据传输方法 |
Families Citing this family (13)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN102761360B (zh) * | 2012-06-29 | 2015-07-22 | 飞天诚信科技股份有限公司 | 一种光信号处理方法及装置 |
CN103078738A (zh) * | 2012-11-22 | 2013-05-01 | 天地融科技股份有限公司 | 一种动态口令生成装置及转接头 |
CN103346891A (zh) * | 2013-07-16 | 2013-10-09 | 北京旋极信息技术股份有限公司 | 光感产生动态令牌中口令的方法 |
CN103368744A (zh) * | 2013-07-16 | 2013-10-23 | 北京旋极信息技术股份有限公司 | 动态令牌中口令的输出方法和*** |
CN103634112A (zh) * | 2013-11-22 | 2014-03-12 | 中国建设银行股份有限公司 | 一种动态口令认证***和方法、动态口令装置 |
GB2522864A (en) * | 2014-02-06 | 2015-08-12 | Ibm | User authentication using temporal knowledge of dynamic images |
CN105577765A (zh) * | 2015-12-16 | 2016-05-11 | 恒宝股份有限公司 | 一种利用闪光灯进行信息传输的方法及装置 |
CN107204959B (zh) * | 2016-03-16 | 2020-07-24 | 阿里巴巴集团控股有限公司 | 验证码的验证方法、装置及*** |
US10333913B2 (en) * | 2017-05-15 | 2019-06-25 | International Business Machines Corporation | Dynamic object passwords |
CN110941805B (zh) * | 2019-11-21 | 2022-06-10 | 北京达佳互联信息技术有限公司 | 身份认证方法及装置 |
CN111787526A (zh) * | 2020-07-10 | 2020-10-16 | 岭南师范学院 | 一种通过颜色律动的数据传输***及其应用方法 |
CN114338613B (zh) * | 2021-11-30 | 2024-05-28 | 深圳兴智数联科技有限公司 | 物联网设备身份标识找回方法、装置、设备及存储介质 |
CN114760253B (zh) * | 2022-03-31 | 2022-10-28 | 慧之安信息技术股份有限公司 | 快速物联网数据传输方法和*** |
Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN1992592A (zh) * | 2005-12-30 | 2007-07-04 | 腾讯科技(深圳)有限公司 | 动态口令认证***和方法 |
CN101051908A (zh) * | 2007-05-21 | 2007-10-10 | 北京飞天诚信科技有限公司 | 动态密码认证***及方法 |
CN101163014A (zh) * | 2007-11-30 | 2008-04-16 | 中国电信股份有限公司 | 一种动态口令身份认证***和方法 |
CN101699892A (zh) * | 2009-10-30 | 2010-04-28 | 北京神州付电子支付科技有限公司 | 动态口令生成方法和动态口令生成装置及网络*** |
Family Cites Families (10)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6738392B1 (en) * | 2000-09-27 | 2004-05-18 | Cisco Technology, Inc. | Method and apparatus of framing high-speed signals |
US7436965B2 (en) * | 2003-02-19 | 2008-10-14 | Microsoft Corporation | Optical out-of-band key distribution |
US20060107063A1 (en) * | 2004-11-18 | 2006-05-18 | Michael Fiske | Generating requests for access to a passcode protected entity |
US20070033649A1 (en) * | 2005-07-20 | 2007-02-08 | Booleansoft | Secure remote access technology |
US20070130463A1 (en) * | 2005-12-06 | 2007-06-07 | Eric Chun Wah Law | Single one-time password token with single PIN for access to multiple providers |
US20070220594A1 (en) * | 2006-03-04 | 2007-09-20 | Tulsyan Surendra K | Software based Dynamic Key Generator for Multifactor Authentication |
US8024793B2 (en) * | 2007-01-22 | 2011-09-20 | University Of Victoria Innovation And Development Corporation | Password generator, system and use thereof |
SE531800C2 (sv) * | 2007-12-12 | 2009-08-11 | Sreg Internat Ab | Inloggningssystem |
CN102075547B (zh) * | 2011-02-18 | 2014-03-26 | 天地融科技股份有限公司 | 动态口令生成方法及装置、认证方法及*** |
CN102509037B (zh) * | 2011-10-10 | 2015-05-20 | 北京宏基恒信科技有限责任公司 | 交易***、方法及装置 |
-
2011
- 2011-11-24 CN CN201110379449.XA patent/CN102377784B/zh active Active
- 2011-12-27 US US13/806,298 patent/US9386013B2/en active Active
- 2011-12-27 WO PCT/CN2011/084750 patent/WO2013075380A1/zh active Application Filing
Patent Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN1992592A (zh) * | 2005-12-30 | 2007-07-04 | 腾讯科技(深圳)有限公司 | 动态口令认证***和方法 |
CN101051908A (zh) * | 2007-05-21 | 2007-10-10 | 北京飞天诚信科技有限公司 | 动态密码认证***及方法 |
CN101163014A (zh) * | 2007-11-30 | 2008-04-16 | 中国电信股份有限公司 | 一种动态口令身份认证***和方法 |
CN101699892A (zh) * | 2009-10-30 | 2010-04-28 | 北京神州付电子支付科技有限公司 | 动态口令生成方法和动态口令生成装置及网络*** |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN110958247A (zh) * | 2019-12-01 | 2020-04-03 | 成都华迈通信技术有限公司 | 一种网关设备数据传输***及数据传输方法 |
CN110958247B (zh) * | 2019-12-01 | 2022-11-04 | 成都华迈通信技术有限公司 | 一种网关设备数据传输***及数据传输方法 |
Also Published As
Publication number | Publication date |
---|---|
CN102377784A (zh) | 2012-03-14 |
US20140082709A1 (en) | 2014-03-20 |
CN102377784B (zh) | 2014-06-04 |
US9386013B2 (en) | 2016-07-05 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
WO2013075380A1 (zh) | 动态口令的认证方法及*** | |
CN110601853B (zh) | 一种区块链私钥生成方法以及设备 | |
TWI749061B (zh) | 區塊鏈身份系統 | |
US9246897B2 (en) | Method and system of login authentication | |
US20200092284A1 (en) | Authentication method and system | |
US10367797B2 (en) | Methods, systems, and media for authenticating users using multiple services | |
US11544365B2 (en) | Authentication system using a visual representation of an authentication challenge | |
CN102347942B (zh) | 一种基于图像采集的信息安全方法及*** | |
WO2015101350A1 (zh) | 一种身份认证方法、***及设备 | |
CN104468115A (zh) | 信息***访问认证方法及装置 | |
US10412266B2 (en) | Image processing apparatus, method of controlling the same, and storage medium | |
NO332479B1 (no) | Fremgangsmåte og dataprogram for verifikasjon av engangspassord mellom tjener og mobil anordning med bruk av flere kanaler | |
US20150365413A1 (en) | Secure Configuration of Authentication Servers | |
US20190066417A1 (en) | System, method, and medium to unlock an object | |
WO2015181925A1 (ja) | 機器制御システム、機器制御装置、機器制御方法及びプログラム | |
CN109302540A (zh) | 一种融合通讯业务的受理方法、装置及设备 | |
US20210152361A1 (en) | Authentication method and authentication device | |
KR101243101B1 (ko) | 스마트폰에서 음성정보를 이용한 일회용 패스워드 기반 사용자 인증 시스템 | |
CN111953497A (zh) | 一种基于hmac算法的消息认证码生成装置及方法 | |
WO2017029708A1 (ja) | 個人認証システム | |
WO2011131152A1 (zh) | 智能密钥装置及提高网上交易和认证安全性的***及方法 | |
CN115085966A (zh) | 一种建立openpts远程可信连接的方法 | |
WO2017016415A1 (zh) | 一种无线局域网络的接入认证方法、服务器和认证*** | |
CN110945832B (zh) | 对称群体认证的方法和*** | |
CN112217632A (zh) | 一种基于智能合约和哈希链的身份认证方法及装置 |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
WWE | Wipo information: entry into national phase |
Ref document number: 13806298 Country of ref document: US |
|
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 11876391 Country of ref document: EP Kind code of ref document: A1 |
|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
122 | Ep: pct application non-entry in european phase |
Ref document number: 11876391 Country of ref document: EP Kind code of ref document: A1 |