TWI559165B - Wireless authentication system and wireless authentication method - Google Patents

Description

Wireless verification system and method thereof

The present invention relates to a wireless verification system and method thereof, and more particularly to a wireless verification system and method thereof that can increase verification security.

With the advancement of related technologies, various types of verification methods have been developed to protect specific devices or information from being stolen or stolen. In general, password authentication methods can be divided into static password authentication and dynamic password authentication. Compared with static password authentication, a fixed password is used. Dynamic password authentication uses a variable password, and the changed password is updated every time the protection mechanism is released to increase authentication security. However, when an electronic device (for example, a mobile phone) is used to release the protection mechanism of the protected device, the change password is wirelessly transmitted between the electronic device and the protected device, so that the variable password is easily intercepted. Therefore, prior art verification methods cannot effectively protect a particular device or information from being stolen or stolen.

It is an object of the present invention to provide a wireless authentication system and method thereof that can increase authentication security to solve the problems of the prior art.

The wireless verification system of the present invention comprises an execution device and a control device. The executor device includes a first wireless module, and a first control unit is coupled to the first wireless module. The control device includes a second wireless module, and a second control unit is coupled to the second wireless module. When the first wireless module receives an activation signal, the first control unit generates a time-correlated random code, and the first control unit transmits the time-correlated random code to the second via the first wireless module. a wireless module, wherein when the second wireless module receives the activation signal and the time-correlated random code, the second control unit generates a comparison verification code according to the time-correlated random code, a fixed password, and a change password. Transmitting the comparison verification code to the first wireless module via the second wireless module; and wherein when the first control unit determines that the comparison verification code corresponds to a set of data stored by the execution device, The first control unit performs a predetermined operation and the change password is updated.

The wireless authentication method of the present invention includes providing an execution device, including a first wireless module, and a first control unit coupled to the first wireless module; and providing a control device, including a second wireless module, And a second control unit coupled to the second wireless module; transmitting an activation signal to the first wireless module and the second wireless module; when the first wireless module receives the activation signal, the The first control unit generates a time-correlated random code, and the first control unit transmits the time-correlated random code to the second wireless module via the first wireless module; when the second wireless module receives the start signal And when the random code is associated with the time, the second control unit generates a comparison verification code according to the time-correlated random code, a fixed password, and a change password, and transmits the comparison verification code to the second wireless module. a first wireless module; the first control unit determines whether the comparison verification code corresponds to a set of data stored by the execution device; and when the first control unit determines that the comparison verification code corresponds to Performing the set end data storage means At the time, the first control unit performs a predetermined operation, and the change password is updated.

100, 100’‧‧‧ Wireless Authentication System

110‧‧‧Executive device

112‧‧‧First wireless module

114‧‧‧First Control Unit

116‧‧‧First memory unit

120‧‧‧Control device

122‧‧‧Second wireless module

124‧‧‧Second control unit

126‧‧‧Second memory unit

210 to 290 ‧ steps

300‧‧‧Cloud Server

302‧‧‧Package

310‧‧‧Electronic devices

410‧‧‧External memory

FP‧‧‧fixed password

VP‧‧‧Change Password

AC1‧‧‧ execution verification code

AC2‧‧‧ comparison verification code

AC1’~ACn’‧‧‧ Standby Comparison Verification Code

T1‧‧‧ time associated random code

Figure 1 is a schematic illustration of a first embodiment of the wireless authentication system of the present invention.

2 is a flow chart of a wireless verification method of the present invention.

FIG. 3 is a schematic diagram of the wireless verification method of the present invention performing a predetermined operation using the alternate comparison verification code.

Figure 4 is a schematic illustration of a second embodiment of the wireless authentication system of the present invention.

Please refer to Figure 1. Figure 1 is a schematic illustration of a first embodiment of the wireless authentication system of the present invention. As shown in FIG. 1, the wireless verification system 100 of the present invention includes an execution device 110 and a control device 120. The executor device 110 includes a first wireless module 112 , and a first control unit 114 is coupled to the first wireless module 112 . The control unit 120 includes a second wireless module 122 and a second control unit 124 coupled to the second wireless module 122. The first wireless module 112 and the second wireless module 122 can communicate by using wireless signals, such as infrared, blue, radio frequency (RF) or Near Field Communication (NFC). However, the invention is not limited thereto. In addition, the executor device 110 further includes a first memory unit 116 for storing a fixed password FP and a change password VP. The control device 120 further includes a second memory unit 126 for storing the fixed password FP and the variable password VP. The fixed password FP and the change password VP stored by the first memory unit 116 are the same as the fixed password stored by the second memory unit 126. FP and change password VP. The fixed password FP is input by the user when setting the wireless verification system 100, and is fixed. The change password VP is generated when the user sets the wireless verification system 100, and is updated after the execution device 110 performs a predetermined operation.

Please refer to Figure 2 and refer to Figure 1 together. 2 is a flow chart of a wireless verification method of the present invention. In this embodiment, the executor device 110 can be a lock, and the console device 120 can be a mobile phone, but the invention is not limited thereto. As shown in FIG. 2, in step 210, when the user wants to use the console device 120 to notify the execution device 110 to perform a predetermined operation of unlocking the protected device (not shown), the user can press a start. A button (not shown) is generated to generate an activation signal, and the activation signal is transmitted to the first wireless module 112 and the second wireless module 122. The protected device may be a traffic vehicle, such as a car, a locomotive or a bicycle. The start button may be a button mounted on the protected device, but the invention is not limited thereto. In step 220, when the first wireless module 112 receives the activation signal, the first control unit 114 generates a time-correlated random code T1, and the first control unit 114 transmits the time-correlated random via the first wireless module 112. The code T1 is to the second wireless module 122. In step 230, the first control unit 114 generates an execution verification code AC1 according to the time-correlated random code T1, the fixed password FP, and the change password VP via a predetermined encryption mechanism, and stores it in the first memory unit 116. In other embodiments of the invention, the first control unit 114 does not have to generate the execution verification code AC1. In step 240, when the second wireless module 122 receives the activation signal and the time-correlated random code T1, the second control unit 124 generates a response according to the time-correlated random code T1, the fixed password FP, and the change password VP via a predetermined encryption mechanism. Compare the verification code AC2. The predetermined encryption mechanism that generates the execution verification code AC1 and the comparison verification code AC2 may be the same or different. In step 250, the second control unit 124 transmits the comparison verification code AC2 to the first wireless module 112 via the second wireless module 122. In step 260, the first control unit 114 determines the comparison verification. Whether the code AC2 corresponds to the execution verification code AC1. When the first control unit 114 determines that the comparison verification code AC2 corresponds to the execution verification code AC1, the representative control device 120 passes the verification, then in step 270, the execution device 110 performs a predetermined operation of unlocking the protected device. When the first control unit 114 determines that the comparison verification code AC2 does not correspond to the execution verification code AC1, then in step 290, the execution device 110 does not perform a predetermined operation of unlocking the protected device. In addition, in step 280, after the execution device 110 performs a predetermined operation of unlocking the protected device, the change password VP is updated.

In addition, in another embodiment of the present invention, the first control unit 114 may decrypt the verification code AC2 to obtain a decryption time-associated random code and a decryption fixed when the first wireless module 112 receives the comparison verification code AC2. The password and/or a decryption change password, and the first control unit 114 can determine whether the decryption time associated random code, the decrypted fixed password, and/or the decrypted change password respectively correspond to the time-correlated random code T1 and the fixed password stored by the execution device 110. FP and / or change password VP. When the first control unit 114 determines that the decryption time associated random code, the decrypted fixed password, and/or the decrypted change password are respectively corresponding to the time-related random code T1, the fixed password FP, and/or the changed password VP stored by the execution device 110, A control unit 114 performs a predetermined operation and the change password VP is updated.

In summary, when the first control unit 114 determines that the comparison verification code AC2 corresponds to a group of materials stored by the execution device 110, such as: performing verification code AC1, time-correlated random code T1, fixed password FP, and/or variation The password VP, the first control unit 114 performs a predetermined operation.

In this embodiment, the change password VP is updated by the first control unit 114, and the first control unit 114 transmits the updated change password VP to the second wireless module 122 via the first wireless module 112, such that the first The memory unit 116 and the second memory unit 126 can respectively store the updated The change password VP is used for the next scheduled operation of unlocking.

However, in other embodiments of the present invention, the change password VP may also be updated by the second control unit 124, and the second control unit 124 transmits the updated change password VP to the first wireless module via the second wireless module 122. 112, so that the first memory unit 116 and the second memory unit 126 can respectively store the updated change password VP for use in the next execution of the predetermined operation of unlocking.

On the other hand, the time-correlated random code T1 generated by the first control unit 114 is a random random number including a first time information, and the first time information corresponds to the generation time of the time-correlated random code T1. The comparison verification code AC2 is generated according to the time-correlated random code T1, so the comparison verification code AC2 includes a second time information. The wireless verification method of the present invention may further comprise whether the first time information of the first time control unit 114 compares the time-correlated random code T1 and the second time information of the comparison verification code AC2. When the first time information of the time-correlated random code T1 and the second time information of the comparison verification code AC2 are identical, the representative verification code AC2 is not forged.

Moreover, the first control unit 114 may further determine whether the transmission time of the comparison verification code AC2 is timed according to the first time information of the time-correlated random code T1 and the time when the comparison verification code AC2 is received. If the first control unit 114 determines that the transmission time of the comparison verification code AC2 is exceeded, it means that the representative verification code AC2 may be forged, even if the comparison verification code AC2 corresponds to the execution verification code AC1. When the first control unit 114 determines that the comparison verification code AC2 is forged, the execution terminal device 110 does not perform a predetermined operation of unlocking the protected device.

In addition, in step 230, the execution verification code AC1 may also be generated according to the time-correlated random code T1, a non-time-correlated random code (not shown), the fixed password FP, and the change password VP via a predetermined encryption mechanism; and in step 240 Medium, the comparison verification code AC2 can also be correlated according to time The random code T1, the non-time-correlated random code, the fixed cipher FP, and the change cipher VP are generated via a predetermined encryption mechanism. A non-time-correlated random code is a random random number that does not contain any time information. The non-time-correlated random code may be generated by the first control unit 114 or the second control unit 124. When the first control unit 114 generates the non-time-correlated random code, the first control unit 114 transmits the non-time-correlated random code to the second wireless module 122 via the first wireless module 112. When the second control unit 124 generates the non-time-correlated random code, the second control unit 124 transmits the non-time-correlated random code to the first wireless module 112 via the second wireless module 122.

In order to further increase the verification security, the wireless verification method of the present invention can further compare the identification code of the console device 120. For example, when the control device 120 is a mobile phone, the second control unit 124 can transmit an International Mobile Equipment Identity (IMEI) of the control device 120 to the second wireless module 122. A wireless module 112. The first control unit 114 may further determine whether the international mobile device identifier of the control device 120 corresponds to a preset international mobile device identifier of the execution device 110. When the first control unit 114 determines that the international mobile device identification code of the control device 120 does not correspond to the preset international mobile device identification code of the execution device 110, the representative control device 120 is not the original preset mobile phone, so the first control Unit 114 does not perform the predetermined operation of unlocking.

In addition, in the above embodiment, the fixed password FP and the change password VP stored by the first memory unit 116 are the same as the fixed password FP and the change password VP stored in the second storage unit 126. However, in other embodiments of the present invention, the second control unit 124 may further encrypt the change password VP according to the one-person password and then store it in the second memory unit 126, and when the second control unit 124 is to generate the comparison verification code AC2, The second control unit 124 then decrypts the encrypted change password in the second memory unit 126 to obtain the change password VP.

In summary, the wireless verification method of the present invention performs verification based on the execution verification code AC1 and the comparison verification code AC2 generated by the time-correlated random code T1, the fixed password FP, and the change password VP. The fixed password FP is input when the user sets the wireless verification system 100, and is not transmitted when the wireless verification method is performed, so that interception can be avoided. The change password VP is updated after the predetermined operation of the execution device 110 to perform unlocking, so that the password can be prevented from being cracked due to being fixed. The time-correlated random code T1 can be used to confirm whether the comparison verification code AC2 is forged, and the time-correlated random code T1 can be further used to confirm whether the comparison verification code AC2 has exceeded the valid time. Therefore, the wireless authentication method of the present invention can effectively increase the authentication security to prevent the protected device from being stolen or stolen.

According to the above configuration, the user can use the mobile phone or other mobile device as the key to unlock the lock, for example, using the mobile phone to start the car. And the protected device ensures that it can only be unlocked by the user's mobile phone. Moreover, the predetermined operation performed by the execution device 110 is not limited to the predetermined operation of unlocking, and the execution device 110 can perform different predetermined operations according to design or user requirements.

Please refer to Figure 3 and refer to Figure 1 together. FIG. 3 is a schematic diagram of the wireless verification method of the present invention performing a predetermined operation using the alternate comparison verification code. As shown in FIG. 3, when the user wants to lend the protected device to the borrower, the user can use the console device 120 to generate at least one spare comparison verification code AC1'~ACn', and the control device 120 can Transmitting at least one spare comparison verification code AC1'~ACn' to a cloud server 300 and an execution device 110 to store at least one spare comparison verification code AC1'~ACn' in the cloud server 300 and the execution device 110 in. The user can inform the borrower of the login information of the cloud server 300, and when the borrower successfully logs into the cloud server 300 using an electronic device 310, the cloud server 300 transmits a backup comparison verification code. A packet 302 of AC1' is sent to the electronic device 310, and the alternate comparison verification code AC1' is used. After the borrower's electronic device 310 receives the packet 302, the electronic device 310 can transmit the packet 302 to the execution device 110. When the first control unit 114 determines that the spare alignment verification code AC1' in the packet 302 corresponds to one of the spare comparison verification codes AC1' to ACn' stored in the execution terminal device 110, the standby comparison verification code AC1' , the electronic device 310 representing the borrower passes the verification, and the spare comparison verification code AC1 ′ stored in the execution device 110 is marked as used, so the first control unit 114 performs a predetermined operation, for example, on the protected device. The predetermined operation of unlocking, or resetting the electronic device 310 and the executing device 110, enables the electronic device 310 to control the executing device 110 to perform a predetermined operation. The borrower may be one or more, and the electronic device 310 may be one or more, and the invention is not limited thereto.

Additionally, packet 302 can contain any other verification related information. For example, the packet 302 may further include a lifetime of the alternate comparison verification code AC1' such that the electronic device 310 can no longer control the execution device 110 to perform a predetermined operation after the backup comparison verification code AC1' expires. Moreover, the packet 302 can further include an international mobile device identification code of the console device 120 to confirm that the electronic device 310 is authorized via the console device 120. Since the packet 302 is generated via a predetermined mechanism, the electronic device 310 cannot open the packet 302, so that the borrower can be prevented from obtaining the verification information in the packet 302.

According to the above configuration, the user can lend the protected device to the borrower, and the borrower can use the electronic device 310 to control the execution device 110 to perform the predetermined operation within the usage period set by the user, and the user does not need to worry about not being able to take the device. Back to the control of the protected device.

Please refer to FIG. 4, which is a schematic diagram of a second embodiment of the wireless verification system of the present invention. As shown in Fig. 4, what is different from the embodiment of Fig. 1 is the variation required for the actuator device 110. The password VP is pre-stored in an external memory 410 (for example, a memory of a memory or other circuit of a car driving computer), and the external memory 410 is coupled to the execution device 110, so that the execution device 110 can be prevented from being cracked. Let the change password VP be stolen. Furthermore, the external memory 410 is also stored after the change password VP is updated. On the other hand, in another embodiment of the present invention, the fixed password FP can also be stored in the external memory 410, and the variable password VP is stored in the first memory unit 116.

Compared with the prior art, the wireless verification system and the method of the present invention simultaneously use the execution verification code AC1 and the comparison verification code AC2 generated by the time-correlated random code T1, the fixed password FP, and the change password VP to verify or utilize The decryption time-associated random code, the decrypted fixed password, and/or the decrypted change password are respectively verified with the time-associated random code T1, the fixed password FP, and/or the changed password VP, so as to have the advantages of static password authentication and dynamic password authentication. . Therefore, the wireless verification system and method of the present invention can increase verification security.

The above are only the preferred embodiments of the present invention, and all changes and modifications made to the scope of the present invention should be within the scope of the present invention.

100‧‧‧Wireless Authentication System

110‧‧‧Executive device

112‧‧‧First wireless module

114‧‧‧First Control Unit

116‧‧‧First memory unit

120‧‧‧Control device

122‧‧‧Second wireless module

124‧‧‧Second control unit

126‧‧‧Second memory unit

FP‧‧‧fixed password

VP‧‧‧Change Password

AC1‧‧‧ execution verification code

AC2‧‧‧ comparison verification code

T1‧‧‧ time associated random code

Claims (9)

A wireless verification system, comprising: an executor device, comprising: a first wireless module; and a first control unit coupled to the first wireless module; and a control device, comprising: a second wireless And the second control unit is coupled to the second wireless module; wherein when the first wireless module receives an activation signal, the first control unit generates a time-correlated random code, and the The control unit transmits the time-correlated random code to the second wireless module via the first wireless module; wherein when the second wireless module receives the start signal and the time-correlated random code, the second control unit Generating a comparison verification code according to the time-correlated random code, a fixed password, and a change password, and transmitting the comparison verification code to the first wireless module via the second wireless module; wherein the first control unit When the comparison verification code corresponds to a group of materials stored by the execution device, the first control unit performs a predetermined operation, and the change password is updated; and wherein the group of materials includes the The time-correlated random code, the fixed password and/or the change password stored by the line device, the first control unit is further configured to decrypt the comparison verification code to obtain a decryption time-associated random code, a decrypted fixed password, and/or Or decrypting the change password, and the first control unit determines that the decryption time associated random code, the decrypted fixed password, and/or the decrypted change password respectively correspond to the time-correlated random code stored by the execution device, and the fixed The predetermined operation is performed when the password and/or the password is changed. The wireless authentication system of claim 1, wherein the fixed password is pre-stored in the execution device and the control device, and the change password is pre-stored in an external memory and the control device, and the The external memory is coupled to the execution device. The wireless authentication system of claim 1, wherein the variable password is pre-stored in the execution device and the control device, and the fixed password is pre-stored in an external memory and the control device, and the The external memory is coupled to the execution device. The wireless verification system of claim 1, wherein the time-correlated random code includes a first time information, and the first control unit is further configured to determine the time according to the first time information and the time when the comparison verification code is received. Compares whether the transmission time of the verification code expires. A wireless verification method includes: providing an execution device, including a first wireless module, and a first control unit coupled to the first wireless module; and providing a control device, including a second wireless module And a second control unit coupled to the second wireless module; transmitting an activation signal to the first wireless module and the second wireless module; when the first wireless module receives the activation signal, The first control unit generates a time-correlated random code, and the first control unit transmits the time-correlated random code to the second wireless module via the first wireless module; when the second wireless module receives the startup When the signal and the time are associated with the random code, the second control unit generates a comparison verification code according to the time-correlated random code, a fixed password, and a change password, and transmits the comparison verification code to the second wireless module to The first wireless module; the first control unit decrypts the comparison verification code to obtain a decryption time-associated random code, a decryption fixed password, and/or a decryption change password; the first control unit determines Determining whether the decryption time associated random code, the decrypted fixed password, and/or the decrypted change password correspond to a set of data stored by the execution device, wherein the set of data includes the time-correlated random code stored by the execution device, a fixed password and/or the change password; and when the first control unit determines the decryption time associated random code, the decrypted fixed password, and/or the decrypted change password corresponds to the time-correlated random code stored by the execution device, When the password is fixed and/or the password is changed, the first control unit performs a predetermined operation, and the change password is updated. The wireless authentication method of claim 5, wherein the time-correlated random code includes a first time information, the wireless verification method further comprising the first control unit receiving the comparison verification code according to the first time information. The time judges whether the transmission time of the comparison verification code is out of time. The wireless authentication method of claim 5, wherein the change password is updated by the first control unit or the second control unit, the wireless verification method further comprising the first control unit transmitting the The updated change password is sent to the second wireless module or the second control unit to transmit the updated change password to the first wireless module via the second wireless module. The wireless authentication method of claim 5, further comprising: generating at least one spare comparison verification code; storing the at least one alternate comparison verification code in a cloud server and the execution device; when an electronic device successfully logs in In the cloud server, the cloud server transmits a packet including the at least one spare comparison verification code to the electronic device; the electronic device transmits the packet to the execution device; the first control unit determines the packet in the packet Whether the at least one alternate comparison verification code corresponds to the at least one standby comparison verification code stored by the execution device; and when the first control unit determines that the at least one standby comparison verification code in the packet corresponds to the execution The first control unit performs a predetermined operation when the at least one alternate comparison verification code is stored by the end device. The wireless authentication method of claim 8, wherein the packet further comprises an International Mobile Equipment Identity (IMEI) of the control device, the wireless verification method further comprising: the first control unit determining Whether the international mobile device identifier in the packet corresponds to a preset international mobile device identifier of the execution device.