CN112188490A - All-in-one dynamic password device and working method thereof - Google Patents

All-in-one dynamic password device and working method thereof Download PDF

Info

Publication number
CN112188490A
CN112188490A CN202011008681.8A CN202011008681A CN112188490A CN 112188490 A CN112188490 A CN 112188490A CN 202011008681 A CN202011008681 A CN 202011008681A CN 112188490 A CN112188490 A CN 112188490A
Authority
CN
China
Prior art keywords
dynamic password
mobile phone
chip
phone app
power
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202011008681.8A
Other languages
Chinese (zh)
Inventor
刘国
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Hengshui Haiboyun Technology Co ltd
Original Assignee
Hengshui Haiboyun Technology Co ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Hengshui Haiboyun Technology Co ltd filed Critical Hengshui Haiboyun Technology Co ltd
Priority to CN202011008681.8A priority Critical patent/CN112188490A/en
Publication of CN112188490A publication Critical patent/CN112188490A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W4/00Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/80Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W76/00Connection management
    • H04W76/10Connection setup
    • H04W76/14Direct-mode setup
    • YGENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02DCLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
    • Y02D30/00Reducing energy consumption in communication networks
    • Y02D30/70Reducing energy consumption in communication networks in wireless communication networks

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Telephone Function (AREA)

Abstract

An all-in-one dynamic password device and a working method thereof are disclosed, the device comprises: the device comprises a battery, a main control chip, a safety chip, a clock chip RTC, a low-power-consumption Bluetooth module, a key and a display; the battery supplies power for the main control chip, the safety chip, the RTC (real time clock) chip, the low-power-consumption Bluetooth module and the display; the main control chip converts the dynamic security authentication data generated by the security chip into a dynamic password, receives a key instruction, drives a display to display and receives and transmits data from the low-power-consumption Bluetooth module; the security chip stores a secret key, calculates dynamic security authentication data and stores an application label; the RTC chip provides a real-time clock for the device and participates in dynamic password calculation; the low-power-consumption Bluetooth module is communicated with external equipment; the keys and the display provide the man-machine interaction interface of the dynamic password hardware.

Description

All-in-one dynamic password device and working method thereof
Technical Field
The invention relates to the technical field of identity authentication, in particular to an all-in-one dynamic password device and a working method of the all-in-one dynamic password device, wherein a user can configure a dynamic password by himself.
Background
Most of the existing dynamic password hardware products on the market are products with single function, for example, a dynamic password product issued by a certain bank can only be used for processing the business of the bank, other scenes cannot be used, and the dynamic password product must be issued by a bank main body.
In addition, google has a software product with dynamic password authentication, called "google authenticator", which is an APP product based on a smart phone, adopts a standard algorithm, and many enterprises use the authentication service of google in practical application. The limitation of this product of google is that it must have a smart phone to use it to when a user has a plurality of different enterprise businesses to use google certification product, if the user changes the cell-phone, it is a time-consuming and laborious work to migrate google certification APP to new smart phone, very inconvenient.
Disclosure of Invention
In order to overcome the defects of the prior art, the invention provides an all-in-one dynamic password device, which can be used for completing the configuration and the initialization of a dynamic password by a user, a service provider only needs to provide an algorithm and a key of the dynamic password for the user to support various dynamic password algorithms, the authentication requirements of different enterprises can be supported, the intelligent mobile phone is not relied on, and the user does not need to undertake the migration work when the intelligent mobile phone is replaced.
The technical scheme of the invention is as follows: the all-in-one dynamic password device comprises: the device comprises a battery, a main control chip, a safety chip, a clock chip RTC, a low-power-consumption Bluetooth module, a key and a display;
the battery supplies power for the main control chip, the safety chip, the RTC (real time clock) chip, the low-power-consumption Bluetooth module and the display; the main control chip converts the dynamic security authentication data generated by the security chip into a dynamic password, receives a key instruction, drives a display to display and receives and transmits data from the low-power-consumption Bluetooth module; the security chip stores a secret key, calculates dynamic security authentication data and stores an application label; the RTC chip provides a real-time clock for the device and participates in dynamic password calculation; the low-power-consumption Bluetooth module is communicated with external equipment; the keys and the display provide the man-machine interaction interface of the dynamic password hardware.
The key is stored and the dynamic security authentication data is calculated through the security chip, the main control chip converts the dynamic security authentication data generated by the security chip into a dynamic password, receives a key instruction, drives the display to display, and receives and transmits the data from the low-power-consumption Bluetooth module, the key and the display provide a human-computer interaction interface of dynamic password hardware, so that the user can complete the configuration and initialization of the dynamic password, a service provider only needs to provide an algorithm and a key of the dynamic password for the user, supports various dynamic password algorithms, can support the authentication requirements of different enterprises, does not depend on the smart phone, and does not need to undertake the migration work when the smart phone is replaced.
The working method of the all-in-one dynamic password device comprises the following steps when the dynamic password equipment is used independently:
(a1) pressing a starting button to start the computer;
(a2) the main control chip reads the application label from the SE and displays the label on the display;
(a3) selecting an application label to be used by a user through a key;
(a4) the main control chip communicates with the security chip through the application label selected by the user, and sends a dynamic password calculation instruction to the security chip;
(a5) after receiving the calculation instruction sent by the main control chip, the security chip uses the corresponding secret key to perform dynamic password operation and returns the operation result to the main control chip;
(a6) after receiving the calculation result of the security chip, the main control chip sends the calculation result to a display for displaying;
when the dynamic password equipment is matched with the mobile phone APP for use, the method comprises the following steps:
(b1) opening a mobile phone APP;
(b2) starting up the dynamic password equipment;
(b3) the dynamic password equipment is connected with the mobile phone APP through the low-power-consumption Bluetooth;
(b4) the mobile phone APP sends dynamic passwords for acquiring all dynamic password applications in the dynamic password equipment to the dynamic password equipment through the low-power-consumption Bluetooth;
(b5) after the dynamic password equipment receives the instruction of the mobile phone APP, the dynamic password applied by each dynamic password is calculated, and the dynamic password and the corresponding application label are sent to the mobile phone APP through the low-power-consumption Bluetooth.
Drawings
FIG. 1 is a block diagram illustrating an overall structure of an all-in-one dynamic password apparatus according to the present invention.
FIG. 2 is a flow chart illustrating a method of operation of the all-in-one dynamic password device in accordance with the present invention.
Detailed Description
As shown in fig. 1, the all-in-one dynamic password device includes: the device comprises a battery, a main control chip, a safety chip, a clock chip RTC, a low-power-consumption Bluetooth module, a key and a display;
the battery supplies power for the main control chip, the safety chip, the RTC (real time clock) chip, the low-power-consumption Bluetooth module and the display; the main control chip converts the dynamic security authentication data generated by the security chip into a dynamic password, receives a key instruction, drives a display to display and receives and transmits data from the low-power-consumption Bluetooth module; the security chip stores a secret key, calculates dynamic security authentication data and stores an application label; the RTC chip provides a real-time clock for the device and participates in dynamic password calculation; the low-power-consumption Bluetooth module is communicated with external equipment; the keys and the display provide the man-machine interaction interface of the dynamic password hardware.
The key is stored and the dynamic security authentication data is calculated through the security chip, the main control chip converts the dynamic security authentication data generated by the security chip into a dynamic password, receives a key instruction, drives the display to display, and receives and transmits the data from the low-power-consumption Bluetooth module, the key and the display provide a human-computer interaction interface of dynamic password hardware, so that the user can complete the configuration and initialization of the dynamic password, a service provider only needs to provide an algorithm and a key of the dynamic password for the user, supports various dynamic password algorithms, can support the authentication requirements of different enterprises, does not depend on the smart phone, and does not need to undertake the migration work when the smart phone is replaced.
Preferably, the battery is a button battery or a dry battery. The battery provides energy for the operation of the whole product, and is a disposable battery which can be replaced.
Preferably, the keys are multiple and are used for realizing independent logic functions.
Preferably, when the battery is replaced, the clock chip RTC performs clock synchronization again to ensure that the time participating in the dynamic password calculation is consistent with the server time.
Preferably, the algorithm for calculating the dynamic password is configured to support algorithms such as AUTH, SM3, and the like, and to support importing multiple sets of keys.
Preferably, the device supports data encryption export for backup, and when a product is replaced, the backup data can be normally used by importing the backup data into a new product once.
As shown in fig. 2, there is also provided a working method of the all-in-one dynamic password device, when the dynamic password device is used independently, it includes the following steps:
(a1) pressing a starting button to start the computer;
(a2) the main control chip reads the application label from the SE and displays the label on the display;
(a3) selecting an application label to be used by a user through a key;
(a4) the main control chip communicates with the security chip through the application label selected by the user, and sends a dynamic password calculation instruction to the security chip;
(a5) after receiving the calculation instruction sent by the main control chip, the security chip uses the corresponding secret key to perform dynamic password operation and returns the operation result to the main control chip;
(a6) after receiving the calculation result of the security chip, the main control chip sends the calculation result to a display for displaying;
when the dynamic password equipment is matched with the mobile phone APP for use, the method comprises the following steps:
(b1) opening a mobile phone APP;
(b2) starting up the dynamic password equipment;
(b3) the dynamic password equipment is connected with the mobile phone APP through the low-power-consumption Bluetooth;
(b4) the mobile phone APP sends dynamic passwords for acquiring all dynamic password applications in the dynamic password equipment to the dynamic password equipment through the low-power-consumption Bluetooth;
(b5) after the dynamic password equipment receives the instruction of the mobile phone APP, the dynamic password applied by each dynamic password is calculated, and the dynamic password and the corresponding application label are sent to the mobile phone APP through the low-power-consumption Bluetooth.
Preferably, the method further comprises an initialization comprising the steps of:
(c1) the dynamic password equipment is connected with a mobile phone APP through a low-power-consumption Bluetooth interface;
(c2) establishing connection between a mobile phone APP and a dynamic password authentication server;
(c3) synchronizing the time of the dynamic password device with the server.
Preferably, the method further comprises a key importing method comprising the steps of:
method for importing key from server
(d1) The dynamic password equipment is connected with a mobile phone APP through a low-power-consumption Bluetooth interface;
(d2) establishing connection between a mobile phone APP and a dynamic password authentication server;
(d3) the mobile phone APP obtains a secret key ciphertext from the dynamic password authentication server, and an application tag is set;
(d4) the mobile phone APP guides the key ciphertext and the dynamic password application tag into the dynamic password device through the low-power-consumption Bluetooth;
import from third party application provider
(e1) Logging in a third party application;
(e2) obtaining a key from a third party application;
(e3) opening a mobile phone APP, inputting a secret key obtained from a third-party application, and setting a third-party application tag;
(e4) the method comprises the steps that a mobile phone APP imports a secret key and an application label into dynamic password equipment through a low-power-consumption Bluetooth interface;
direct manual entry of previously backed up keys
(f1) Opening a mobile phone APP, inputting a backup key plaintext, and setting an application label;
(f2) the method comprises the steps that a mobile phone APP imports a secret key and an application label into dynamic password equipment through a low-power-consumption Bluetooth interface;
importing from exported backup files
(g1) Opening a mobile phone APP, and selecting a backup file to import;
(g2) reading the content of the backup file by the mobile phone APP;
(g3) and the mobile phone APP imports the content of the backup file into the dynamic password equipment through the low-power-consumption Bluetooth interface.
The invention has the following beneficial effects:
1. the hardware product can be configured by the user, and the service provider only needs to complete the configuration and initialization of the dynamic password to the algorithm and the secret key of the dynamic password of the user.
2. For enterprises such as banks using dynamic passwords for security authentication, the cost of issuing dynamic password hardware products is not required to be borne, and only authentication algorithms and keys are required to be provided;
3. the product described in the patent can support various dynamic password algorithms, can support the authentication requirements of different enterprises, does not depend on the smart phone, and does not need to undertake the migration work when the smart phone is replaced for a user;
4. and under the condition that the keys and algorithms of other brand tokens are known, the functions of the other brand tokens can be migrated to the patent product.
The above description is only a preferred embodiment of the present invention, and is not intended to limit the present invention in any way, and all simple modifications, equivalent variations and modifications made to the above embodiment according to the technical spirit of the present invention still belong to the protection scope of the technical solution of the present invention.

Claims (9)

1. An all-in-one dynamic password device is characterized in that: it includes: the device comprises a battery, a main control chip, a safety chip, a clock chip RTC, a low-power-consumption Bluetooth module, a key and a display;
the battery supplies power for the main control chip, the safety chip, the RTC (real time clock) chip, the low-power-consumption Bluetooth module and the display; the main control chip converts the dynamic security authentication data generated by the security chip into a dynamic password, receives a key instruction, drives a display to display and receives and transmits data from the low-power-consumption Bluetooth module; the security chip stores a secret key, calculates dynamic security authentication data and stores an application label; the RTC chip provides a real-time clock for the device and participates in dynamic password calculation; the low-power-consumption Bluetooth module is communicated with external equipment; the keys and the display provide the man-machine interaction interface of the dynamic password hardware.
2. The all-in-one dynamic password device of claim 1, wherein: the battery is a button battery or a dry battery.
3. The all-in-one dynamic password device of claim 2, wherein: the keys are multiple and used for realizing independent logic functions.
4. The all-in-one dynamic password device of claim 3, wherein: when the battery is replaced, the clock chip RTC performs clock synchronization again, and the time participating in dynamic password calculation is ensured to be consistent with the server time.
5. The all-in-one dynamic password device of claim 4, wherein: the algorithm for calculating the dynamic password is configured to support the AUTH, SM3 algorithms and to support importing multiple sets of keys.
6. The all-in-one dynamic password device of claim 5, wherein: the device supports data encryption export for backup, and when a product is replaced, the backup data can be normally used once by importing the backup data into a new product.
7. The method of claim 1, wherein the method further comprises: when the dynamic password device is used independently, the method comprises the following steps:
(a1) pressing a starting button to start the computer;
(a2) the main control chip reads the application label from the SE and displays the label on the display;
(a3) selecting an application label to be used by a user through a key;
(a4) the main control chip communicates with the security chip through the application label selected by the user, and sends a dynamic password calculation instruction to the security chip;
(a5) after receiving the calculation instruction sent by the main control chip, the security chip uses the corresponding secret key to perform dynamic password operation and returns the operation result to the main control chip;
(a6) after receiving the calculation result of the security chip, the main control chip sends the calculation result to a display for displaying;
when the dynamic password equipment is matched with the mobile phone APP for use, the method comprises the following steps:
(b1) opening a mobile phone APP;
(b2) starting up the dynamic password equipment;
(b3) the dynamic password equipment is connected with the mobile phone APP through the low-power-consumption Bluetooth;
(b4) the mobile phone APP sends dynamic passwords for acquiring all dynamic password applications in the dynamic password equipment to the dynamic password equipment through the low-power-consumption Bluetooth;
(b5) after the dynamic password equipment receives the instruction of the mobile phone APP, the dynamic password applied by each dynamic password is calculated, and the dynamic password and the corresponding application label are sent to the mobile phone APP through the low-power-consumption Bluetooth.
8. The method of claim 7, wherein the password device comprises: the method further comprises an initialization comprising the steps of:
(c1) the dynamic password equipment is connected with a mobile phone APP through a low-power-consumption Bluetooth interface;
(c2) establishing connection between a mobile phone APP and a dynamic password authentication server;
(c3) synchronizing the time of the dynamic password device with the server.
9. The method of claim 8, wherein the password device comprises: the method also includes a key importing method, which includes the steps of:
method for importing key from server
(d1) The dynamic password equipment is connected with a mobile phone APP through a low-power-consumption Bluetooth interface;
(d2) establishing connection between a mobile phone APP and a dynamic password authentication server;
(d3) the mobile phone APP obtains a secret key ciphertext from the dynamic password authentication server, and an application tag is set;
(d4) the mobile phone APP guides the key ciphertext and the dynamic password application tag into the dynamic password device through the low-power-consumption Bluetooth;
import from third party application provider
(e1) Logging in a third party application;
(e2) obtaining a key from a third party application;
(e3) opening a mobile phone APP, inputting a secret key obtained from a third-party application, and setting a third-party application tag;
(e4) the method comprises the steps that a mobile phone APP imports a secret key and an application label into dynamic password equipment through a low-power-consumption Bluetooth interface;
direct manual entry of previously backed up keys
(f1) Opening a mobile phone APP, inputting a backup key plaintext, and setting an application label;
(f2) the method comprises the steps that a mobile phone APP imports a secret key and an application label into dynamic password equipment through a low-power-consumption Bluetooth interface;
importing from exported backup files
(g1) Opening a mobile phone APP, and selecting a backup file to import;
(g2) reading the content of the backup file by the mobile phone APP;
(g3) and the mobile phone APP imports the content of the backup file into the dynamic password equipment through the low-power-consumption Bluetooth interface.
CN202011008681.8A 2020-09-23 2020-09-23 All-in-one dynamic password device and working method thereof Pending CN112188490A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202011008681.8A CN112188490A (en) 2020-09-23 2020-09-23 All-in-one dynamic password device and working method thereof

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202011008681.8A CN112188490A (en) 2020-09-23 2020-09-23 All-in-one dynamic password device and working method thereof

Publications (1)

Publication Number Publication Date
CN112188490A true CN112188490A (en) 2021-01-05

Family

ID=73955421

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202011008681.8A Pending CN112188490A (en) 2020-09-23 2020-09-23 All-in-one dynamic password device and working method thereof

Country Status (1)

Country Link
CN (1) CN112188490A (en)

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102186169A (en) * 2010-04-30 2011-09-14 北京华大智宝电子系统有限公司 Identity authentication method, device and system
US20160277393A1 (en) * 2014-10-31 2016-09-22 Hangzhou Wopuwulian Science & Technology Co., Ltd Clock synchronized dynamic password security label validity real-time authentication system and method thereof
CN209151180U (en) * 2018-12-07 2019-07-23 焦少波 A kind of multi-functional wearable authenticating device
CN110730441A (en) * 2019-10-18 2020-01-24 飞天诚信科技股份有限公司 Bluetooth device and working method thereof

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102186169A (en) * 2010-04-30 2011-09-14 北京华大智宝电子系统有限公司 Identity authentication method, device and system
US20160277393A1 (en) * 2014-10-31 2016-09-22 Hangzhou Wopuwulian Science & Technology Co., Ltd Clock synchronized dynamic password security label validity real-time authentication system and method thereof
CN209151180U (en) * 2018-12-07 2019-07-23 焦少波 A kind of multi-functional wearable authenticating device
CN110730441A (en) * 2019-10-18 2020-01-24 飞天诚信科技股份有限公司 Bluetooth device and working method thereof

Similar Documents

Publication Publication Date Title
US8954745B2 (en) Method and apparatus for generating one-time passwords
CN105491077B (en) A kind of system of authentication
WO2016045469A1 (en) Information encryption method and mobile terminal
CN105790951A (en) Identity authentication device and intelligent terminal
CN102638471A (en) Password protection and management method
CN105516180A (en) Cloud secret key authentication system based on public key algorithm
CN105337955A (en) Domestic, safe and controllable virtual desktop management control system
CN103606047A (en) Password management system
CN101808077B (en) Information security input processing system and method and smart card
CN102831738A (en) Mobile card swiping unit, mobile payment system and method
CN107395610A (en) One kind communication authentication method, first terminal and second terminal
TWI626607B (en) Smart card with dynamic token OTP function and working method thereof
CN105791277A (en) Identity authentication method
CN102880305A (en) Keyboard input encryption method and mobile terminal thereof
CN204069000U (en) Mobile encrypted authenticate device
CN103051640A (en) Bluetooth-based online banking safety equipment and data communication method thereof
CN105022965B (en) A kind of data ciphering method and device
CN103595532A (en) Multi-functional composite password key based on USBKEY and OTP technology
CN101931530B (en) Generation method, authentication method and device for dynamic password and network system
CN104935550A (en) Intelligent electronic commerce user management system technique and operating method thereof
WO2016086708A1 (en) Payment verification method, apparatus and system
CN201130381Y (en) Electric signature tool with cryptogram management function
CN112188490A (en) All-in-one dynamic password device and working method thereof
CN114726597B (en) Data transmission method, device, system and storage medium
WO2020077626A1 (en) Method and device for recognizing finger vein information

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination