WO2021115381A1

WO2021115381A1 - Method for terminal to access monitoring platform, and electronic device, platform and storage medium

Info

Publication number: WO2021115381A1
Application number: PCT/CN2020/135292
Authority: WO
Inventors: 李伟华; 夷嬿霖; 郑海平
Original assignee: 中兴通讯股份有限公司
Priority date: 2019-12-12
Filing date: 2020-12-10
Publication date: 2021-06-17
Also published as: CN112995991A

Abstract

The embodiments of the present application relate to the field of communications. Disclosed are a method for a terminal to access a monitoring platform, and an electronic device, a platform and a storage medium. In the present application, the method comprises: generating a first digital signature according to attribute information of a terminal and a dynamic verification code received from a monitoring platform during the process of logging in to the monitoring platform; sending an access request including the first digital signature to the monitoring platform, such that the monitoring platform authenticates the first digital signature according to the attribute information bound to a login account of the terminal and the issued dynamic verification code; and receiving a response message issued by the monitoring platform after the authentication is passed, and accessing the monitoring platform.

Description

Method for terminal access to monitoring platform, electronic equipment, platform and storage medium

Cross-references to related applications

This application is based on a Chinese patent application with an application number of 201911272818.8 and an application date of December 12, 2019, and claims the priority of the Chinese patent application. The entire content of the Chinese patent application is hereby incorporated into this application by way of introduction.

Technical field

The embodiments of the present application relate to the field of communications, and in particular to a method, electronic equipment, platform, and storage medium for a terminal to access a monitoring platform.

Background technique

Mobile video surveillance, as the name implies, is the integration of mobile network and video surveillance. With the improvement of mobile bandwidth, mobile terminal processing capabilities and camera resolution, mobile video surveillance has ushered in a broad space for development. The development trend of mobile video surveillance has gradually changed from operating vehicles, public security mobile law enforcement, logistics management, industry security inspections, etc. The professional market is gradually transitioning to a civilian market dominated by homes, shops, and small offices.

Video surveillance images are collected and encoded by mobile capture devices, and processed by network optimization algorithms for fidelity. The mobile signals are transmitted in the air using network technologies such as WiFi and 4G, and are oriented to mobile terminals such as mobile phones, PADs, and laptops. , To realize the function of people to monitor remote real-time dynamic pictures anytime and anywhere, providing a simpler, more convenient and more timely monitoring solution for enterprises and families.

Summary of the invention

The purpose of the embodiments of this application is to provide a method, electronic equipment, platform, and storage medium for a terminal to access the monitoring platform, which can improve the security of the terminal’s access to the monitoring platform, thereby improving the user’s ability to access the terminal to the monitoring platform. Sense of security.

In order to solve the above technical problems, the embodiments of the present application provide a method for a terminal to access a monitoring platform, which is applied to a terminal, and the method includes: according to the attribute information of the terminal and logging in to the monitoring platform from the monitoring platform The received dynamic verification code generates a first digital signature; an access request containing the first digital signature is sent to the monitoring platform for the monitoring platform to use the attribute information bound to the terminal’s login account and download The sent dynamic verification code authenticates the first digital signature; receives a response message issued by the monitoring platform after the authentication is passed, and accesses the monitoring platform.

The embodiment of the present application also provides a method for a terminal to access a monitoring platform, which is applied to a monitoring platform. The method includes: generating a dynamic verification code during the process of logging in to the monitoring platform by the terminal and sending it to the terminal to For the terminal to generate a first digital signature based on the terminal’s attribute information and the dynamic verification code; receive an access request containing the first digital signature sent by the terminal; bind based on the terminal’s login account And the issued dynamic verification code to authenticate the first digital signature; after the authentication is passed, a response message is issued to the terminal for the terminal to receive the response message Access the monitoring platform.

The embodiment of the present application also provides an electronic device. The electronic device is a terminal, and includes: at least one processor; and a memory communicatively connected with the at least one processor; wherein the memory stores the The instructions executed by the at least one processor are executed by the at least one processor, so that the at least one processor can execute the foregoing terminal access monitoring platform method.

The embodiment of the present application also provides a platform. The platform is a monitoring platform and includes: at least one processor; and a memory communicatively connected with the at least one processor; The instructions executed by the at least one processor are executed by the at least one processor, so that the at least one processor can execute the foregoing terminal access monitoring platform method.

The embodiment of the present application also provides a computer-readable storage medium that stores a computer program, and the computer program is executed by a processor to implement the above-mentioned terminal access monitoring platform method.

Description of the drawings

One or more embodiments are exemplified by the pictures in the corresponding drawings. These exemplified descriptions do not constitute a limitation on the embodiments. The elements with the same reference numerals in the drawings are denoted as similar elements. Unless otherwise stated, the figures in the attached drawings do not constitute a scale limitation.

Fig. 1 is a flowchart of a method for a terminal to access a monitoring platform according to the first embodiment of the present application;

FIG. 2 is a flowchart of a method of binding a login account of a terminal and attribute information of the terminal according to the first embodiment of the present application;

Fig. 3 is a flowchart of a method for terminal access to a monitoring platform according to a second embodiment of the present application;

Fig. 4 is a flowchart of a method for terminal access to a monitoring platform according to a third embodiment of the present application;

FIG. 5 is a flowchart of a method for a terminal to access a monitoring platform according to a fourth embodiment of the present application;

Fig. 6 is a flowchart of a method for terminal access to a monitoring platform according to a fifth embodiment of the present application;

FIG. 7 is a flowchart of a method for binding a login account of a terminal and attribute information of the terminal according to a fifth embodiment of the present application;

FIG. 8 is a flowchart of a method for a terminal to access a monitoring platform according to a sixth embodiment of the present application;

FIG. 9 is a flowchart of a method for a terminal to access a monitoring platform according to a seventh embodiment of the present application;

FIG. 10 is a flowchart of a method for a terminal to access a monitoring platform according to an eighth embodiment of the present application;

FIG. 11 is a structural diagram of an electronic device according to a ninth embodiment of the present application;

Fig. 12 is a structural diagram of a platform according to a tenth embodiment of the present application.

Detailed ways

In order to make the objectives, technical solutions, and advantages of the embodiments of the present application clearer, the various embodiments of the present application will be described in detail below with reference to the accompanying drawings. However, those of ordinary skill in the art can understand that in each embodiment of the present application, many technical details are proposed in order to enable readers to better understand the present application. However, even without these technical details and various changes and modifications based on the following embodiments, the technical solution claimed in this application can be realized. The following divisions of the various embodiments are for convenience of description, and should not constitute any limitation on the specific implementation manners of the present application, and the various embodiments may be combined with each other without contradiction.

At present, with the improvement of mobile bandwidth, mobile terminal processing capacity and camera resolution, the bandwidth problem and real-time problem of the development bottleneck of mobile video surveillance have been basically solved. However, the inventor of this application found that: when the mobile terminal is used as a collection terminal, if the access security is relatively poor, the collection terminal may be replaced by other fake terminals, resulting in invalid or unavailable collected video; when the mobile terminal is used as a monitoring terminal When the device is connected to the device, if the access security is relatively poor, other fake terminals are connected to the platform, resulting in illegal browsing and downloading of surveillance videos, resulting in privacy leakage and other issues. Therefore, if the security problem of mobile video surveillance is further solved, it will promote the rapid development of mobile video surveillance, and mobile video surveillance will usher in a broad space for development.

The first embodiment of the present application relates to a method for a terminal to access a monitoring platform, which is applied to a terminal. The method includes: generating a first digital signature based on the terminal’s attribute information and the dynamic verification code received from the monitoring platform during the login to the monitoring platform ; Send an access request containing the first digital signature to the monitoring platform for the monitoring platform to authenticate the first digital signature according to the attribute information bound to the login account of the terminal and the issued dynamic verification code; receive the monitoring platform in the authentication The response message issued after the right is passed is connected to the monitoring platform.

The flowchart of the method for terminal access to the monitoring platform in this embodiment is shown in Fig. 1, and includes:

Step 101: Generate a first digital signature according to the attribute information of the terminal and the dynamic verification code received from the monitoring platform during the process of logging in to the monitoring platform.

Specifically, the terminal has the functions of receiving a verification code, acquiring attribute information of the terminal, and generating a digital signature including the terminal attribute information and the verification code. The terminal’s attribute information refers to the terminal’s International Mobile Equipment Identity (IMEI), the terminal’s SIM card’s International Mobile Subscriber Identification Number (IMSI, International Mobile Subscriber Identification Number), or calling the terminal system (such as Android, iOS, etc.) ) The interface generates a unique identifier.

In this embodiment, the terminal is a terminal for collecting video, that is, a VSS (Video Surveillance System) terminal. The VSS terminal can be divided into a fixed VSS terminal or a mobile VSS terminal. The VSS terminal in this example refers to a mobile VSS terminal with a camera, such as a smart phone, a tablet computer, etc. The mobile VSS terminal includes hardware for running software and running APP software, namely mobile equipment + APP software; APP software is software that can be identified by the monitoring platform, so that the terminal can upload the collected content to the monitoring platform through the APP software.

In one example, the terminal is a terminal used to monitor video, that is, a VSS client, such as a smart phone, a tablet computer, etc. The VSS client includes hardware running software and APP software running in the device, that is, mobile device + APP software; APP software is software that can be identified by the monitoring platform, so that the terminal can browse the video content of the monitoring platform through the APP software.

The monitoring platform, the VSS platform, is a distributed architecture consisting of a central node and several edge nodes. It is worth noting that the VSS platform in this embodiment has the functions of generating verification codes and verifying digital signatures containing terminal attribute information and verification codes. The platform includes mobile monitoring interface machines, namely MSP interface machines, central management server CMS and signaling management. Server RGM, SMS interface machine.

The dynamic verification code in this embodiment may be a short message verification code. This embodiment and the following embodiments all take the short message verification code as an example for description, but it is not limited thereto. Therefore, the user manually enters the login account to trigger the APP software to send a login request to the monitoring platform, where the initial login is the terminal's phone number and user name and other information; after receiving the login request, the MSP interface machine of the monitoring platform sends the login request to Monitor the CMS and RGM of the monitoring platform, and forward the verification code returned by the CMS and RGM of the monitoring platform to the SMS interface machine of the monitoring platform. The SMS interface machine sends the dynamic verification code to the SMS system of the terminal. The dynamic verification code is input into the APP software, and after the user clicks the access button of the APP software interface, the APP software generates the first digital signature according to the terminal attribute information and the dynamic verification code. It is worth noting that the dynamic verification code received by the terminal from the monitoring platform is different each time.

It should be noted that the channel through which the monitoring platform issues the verification code to the terminal and the channel through which the request or response message exchanges between the terminal and the monitoring platform can be the same channel or different channels. In this embodiment, the first digital signature is generated based on the terminal’s attribute information and the dynamic verification code received from the monitoring platform during the login process through the preset channel; the preset channel is different from the one between the terminal and the monitoring platform. The channel for request or response message interaction. That is, the short message verification code is sent to the short message center of operators such as mobile/telecom through the short message interface machine, and the operator sends the short message system of the terminal through the short message service, and the access request or response message between the terminal and the monitoring platform is not It needs to go through the operator’s short message center and directly interact with the channel connected by the MSP interface machine and APP software; that is, the channel through which the monitoring platform sends the verification code to the terminal is different from the channel for the access request between the terminal and the monitoring platform aisle. By setting different channels, the risk of the dynamic verification code being stolen is reduced, thereby further improving the security of terminal access to the monitoring platform.

In one example, the verification code is obtained by hashing the random salt value generated by the time stamp information by the monitoring platform. The monitoring platform generates a random salt value according to the time stamp information or a certain part of it as a seed random number, and then hashes the generated random salt value to generate a verification code.

This method of generating a verification code improves the security of the verification code, thereby further improving the security of the terminal accessing the monitoring platform.

Step 102: Send an access request containing the first digital signature to the monitoring platform for the monitoring platform to authenticate the first digital signature according to the attribute information bound to the login account of the terminal and the issued dynamic verification code.

Specifically, after the user clicks the access button on the APP software interface, the APP software sends an access request containing the first digital signature to the monitoring platform, and the monitoring platform uses the attribute information bound to the login account of the terminal and the issued dynamic verification The code authenticates the first digital signature. The first digital signature can be plaintext information, or it can be encrypted. In this embodiment, the first digital signature is plaintext, and the specific process of authentication is: parsing the first signature to obtain the terminal's attribute information and the dynamic verification code received from the monitoring platform during the login to the monitoring platform; if the terminal's attribute information and the terminal If the attribute information bound to the login account is consistent and the received dynamic verification code is consistent with the issued dynamic verification code, the authentication is passed.

Among them, the specific flow chart of the binding method of the login account of the terminal and the attribute information of the terminal is shown in Figure 2, including:

Step 1021: Send a registration request to the monitoring platform for the monitoring platform to issue a dynamic verification code after receiving the registration request.

Specifically, after the user clicks the registration button on the APP software interface, the APP software sends a registration request to the monitoring platform, and the short message interface machine sends the dynamic verification code to the terminal's short message system, and the dynamic verification code is manually operated by the user. Enter the APP software. In this embodiment, the channel for the monitoring platform to issue the verification code to the terminal and the channel for the registration request between the terminal and the monitoring platform are different channels.

Step 1022: Receive a dynamic verification code from the monitoring platform.

Step 1023: Generate a first digital signature according to the attribute information and the received dynamic verification code.

Step 1024: Send the first digital signature and the login account of the terminal to the monitoring platform, so that the monitoring platform can parse the attribute information from the first digital signature, and bind the login account of the terminal with the attribute information of the terminal.

In an example, the received dynamic verification code is encrypted based on a preset irreversible encryption algorithm to obtain an encryption key, and the encryption key is used to reversibly encrypt the first digital signature to obtain the encrypted first digital signature. The monitoring platform encrypts the issued dynamic verification code based on the same irreversible encryption algorithm to obtain the decryption key, and uses the decryption key to decrypt the encrypted first digital signature with the inverse algorithm of the reversible encryption algorithm to obtain the first digital signature. Restore it to readable plaintext information, so that the terminal's attribute information can be obtained, the login account and the terminal's attribute information are bound, and the bound information of the two is stored locally. In addition, the first digital signature may not be encrypted, that is, the first digital signature is plaintext information, and the monitoring platform may directly obtain the attribute information according to the first digital signature.

It should be noted that if the terminal is replaced or the SIM card of the mobile terminal is replaced, it is necessary to re-bind the terminal's login account with the terminal's attribute information.

When the login account is bound to the attribute information, the first digital signature sent by the terminal to the monitoring platform is generated by the attribute information and the dynamic verification code, which can ensure the authenticity and reliability of the attribute information obtained by the monitoring platform from the first digital signature. Improved the authenticity and reliability of the process of binding the login account and attribute information.

Step 103: Receive a response message issued by the monitoring platform after the authentication is passed, and access the monitoring platform.

Specifically, when the terminal receives the issued response message, it can immediately access the monitoring platform, or can access the monitoring platform when the preset time is met, which is not specifically limited in this embodiment. It is worth noting that the response message can carry video information, such as resolution and frame rate.

In one example, receiving the response message issued by the monitoring platform after the authentication is passed, and accessing the monitoring platform is specifically: receiving the response message containing the second digital signature issued by the monitoring platform after the authentication is passed, and according to the terminal The attribute information of the terminal and the received dynamic verification code authenticate the second digital signature, and access the monitoring platform after the authentication is passed; wherein the second digital signature is the attribute information bound to the terminal’s login account and the issued dynamic The verification code is generated. At this time, the terminal also has the function of verifying a digital signature containing terminal attribute information and a verification code. The second digital signature is plain text information. The terminal can obtain the attribute information bound to the login account of the terminal and the issued dynamic verification code according to the second digital signature. If the attribute information bound to the login account of the terminal is consistent with the attribute information of the terminal, If the issued dynamic verification code is consistent with the received dynamic verification code, the authentication is passed.

In an example, the second digital signature is generated by the monitoring platform based on the irreversible encryption algorithm on the attribute information bound to the terminal's login account and the issued dynamic verification code plaintext information, and the terminal authenticates the second digital signature. It is: based on the same irreversible encryption algorithm to encrypt the plain text formed by combining the terminal attribute information and the received dynamic verification code to generate an authentication password, and to determine whether the authentication password matches the second digital signature, when the authentication password matches The authentication passes when the first digital signature matches.

In one example, the monitoring platform encrypts the plaintext information formed by combining the attribute information bound to the terminal's login account and the issued dynamic verification code based on the irreversible encryption algorithm, and after generating the second digital signature, it is also based on the irreversible encryption algorithm Encrypt the received dynamic verification code to obtain an encryption key, use the encryption key to encrypt the second digital signature to obtain the encrypted second digital signature; and send a response message containing the encrypted second digital signature to the terminal. The authentication process of the terminal on the second digital signature is: encrypt the received dynamic verification code based on the same irreversible encryption algorithm to obtain a decryption key, and use the decryption key to decrypt the encrypted second digital signature to obtain the first 2. Digital signature, based on the same irreversible encryption algorithm to encrypt the plain text formed by the combination of the terminal's attribute information and the received dynamic verification code to generate an authentication password, and to determine whether the authentication password matches the second digital signature, when authenticating The authentication passes when the password matches the first digital signature.

In this embodiment, the first digital signature includes the terminal's attribute information and the dynamic verification code; the terminal's attribute information is the immutable digital part, and the dynamic verification code is the real-time changing digital part; that is, it is used in the terminal and monitoring platform access The first digital signature to authenticate the identity includes both an immutable digital part and a real-time changing digital part, which can improve the reliability of identity authentication, thereby enhancing the security of terminal access to the monitoring platform. Further, the first digital signature is generated based on the terminal’s attribute information and the dynamic verification code received from the monitoring platform through the preset channel during the login process of the monitoring platform; wherein, the preset channel is different from the request or the request between the terminal and the monitoring platform. Response message interaction channel; by setting different channels, the risk of dynamic verification code being stolen is reduced, thereby further improving the security of terminal access to the monitoring platform.

In addition, in some embodiments, since the response message contains the second digital signature, the terminal does not access the monitoring platform when receiving the response message, and only accesses the monitoring platform after the terminal passes the authentication of the second digital signature. , That is, the terminal has also undergone an authentication process, which can further improve the reliability of identity authentication, thereby further improving the security of the terminal access to the monitoring platform.

The second embodiment of the present application relates to a method for a terminal to access a monitoring platform. This embodiment is substantially the same as the first embodiment, but the difference lies in that the plaintext information formed by combining the attribute information of the terminal and the received dynamic verification code is irreversibly encrypted to generate the first digital signature.

The flowchart of the method for terminal access to the monitoring platform in this embodiment is shown in Fig. 3, including:

Steps

202 and 203 are similar to steps 102 and 103 respectively, and will not be repeated here.

Step 201: Encrypt the plaintext information formed by combining the attribute information of the terminal and the received dynamic verification code based on a preset first irreversible encryption algorithm, and generate a first digital signature.

Specifically, irreversible encryption cannot obtain attribute information and dynamic verification codes through reverse analysis. When monitoring platform authentication, only the same first digital signature can be obtained based on the same attribute information and dynamic verification code and encrypted by the same irreversible encryption algorithm. Authentication passed. The plain text information formed by combining the terminal attribute information and the received dynamic verification code is IMEI or/and IMSI and the dynamic verification code are spliced together to obtain the plain text information, for example: the IMEI or/and IMSI and the dynamic verification code can be XORed Obtain the plaintext information; then use the irreversible encryption algorithm to encrypt the plaintext information, for example: the irreversible encryption algorithm is SHA256. At this time, the authentication process of the monitoring platform: the monitoring platform encrypts the plain text formed by combining the attribute information bound to the terminal's login account and the issued dynamic verification code based on the same first irreversible encryption to generate an authentication password, and Determine whether the authentication password matches the first digital signature; wherein, when the authentication password matches the first digital signature, it means that the authentication is passed.

In this embodiment, the terminal uses encryption technology to enhance the confidentiality of attribute information and dynamic verification codes, and irreversible encryption cannot obtain attribute information and dynamic verification codes through reverse analysis. When the monitoring platform is authenticated, it is only based on the same attribute information and dynamic verification. The same first digital signature can be decrypted only after the same irreversible encryption algorithm is encrypted to obtain the same first digital signature, which is beneficial to further improve the authenticity of the authentication result of the first digital signature, thereby further improving the security of terminal access to the monitoring platform.

The third embodiment of the present application relates to a method for a terminal to access a monitoring platform. This embodiment is roughly the same as the second embodiment, but the difference is: the terminal irreversibly encrypts the dynamic verification code to obtain the encryption key, and then uses the encryption key to encrypt the first digital signature to obtain the encrypted first digital signature .

The flowchart of the method for terminal access to the monitoring platform in this embodiment is shown in Fig. 4, including:

Steps

301 and 304 are similar to

steps

201 and 203 respectively, and will not be repeated here.

Step 302: Encrypt the received dynamic verification code based on a preset second irreversible encryption algorithm to obtain an encryption key, and use the encryption key to encrypt the first digital signature to obtain an encrypted first digital signature.

Step 303: Send an access request including the encrypted first digital signature to the monitoring platform.

Specifically, after the user clicks the access button on the APP software interface, the APP software encrypts the received dynamic verification code based on the preset second irreversible encryption algorithm to obtain the encryption key, and then uses the encryption key to perform the reversible digital signature on the first digital signature. The encryption algorithm performs reversible encryption to obtain the encrypted first digital signature, for example: the reversible encryption algorithm is AES256; and the access request containing the encrypted first digital signature is sent to the monitoring platform. It is worth noting that the second irreversible encryption algorithm may be the same as the first irreversible encryption algorithm. The authentication process of the monitoring platform is as follows: the monitoring platform encrypts the issued dynamic verification code based on the preset second irreversible encryption algorithm to obtain the decryption key, and uses the decryption key to reversibly encrypt the encrypted first digital signature The inverse algorithm decrypts the algorithm to obtain the first digital signature. Based on the preset first irreversible encryption algorithm, the attribute information bound to the terminal's login account and the issued dynamic verification code are combined to encrypt the plain text to generate an authentication password. And judge whether the authentication password matches the first digital signature; wherein, when the authentication password matches the first digital signature, it means that the authentication is passed.

In this embodiment, the terminal irreversibly encrypts the dynamic verification code to obtain an encryption key, and then uses the encryption key to encrypt the first digital signature to obtain the encrypted first digital signature. This is beneficial to further improve the authenticity of the authentication result of the first digital signature, thereby further improving the security of the terminal's access to the monitoring platform.

The fourth embodiment of the present application relates to a method for a terminal to access a monitoring platform. This embodiment is roughly the same as the first embodiment, except that the terminal performs functional configuration on the monitoring platform.

The flowchart of the method for terminal access to the monitoring platform in this embodiment is shown in Fig. 5 and includes:

Steps 401-403 are similar to steps 101-103, respectively, and will not be repeated here.

Step 404: Send a function configuration request containing the first digital signature to the monitoring platform for the monitoring platform to authenticate the first digital signature according to the attribute information bound to the login account and the issued dynamic verification code, and after the authentication is passed Then configure the functions for the terminal.

In this embodiment, the channel through which the monitoring platform issues the verification code to the terminal and the channel through which the functional configuration request between the terminal and the monitoring platform is requested are different channels.

In an example, the terminal encrypts the plaintext information formed by combining the attribute information of the terminal and the received dynamic verification code based on the irreversible encryption algorithm for the first digital signature to generate the first digital signature. In addition, the first digital signature may not be encrypted, that is, the first digital signature is plaintext information.

In an example, the first digital signature is based on the irreversible encryption algorithm by the terminal to encrypt the plaintext information formed by the combination of the terminal's attribute information and the received dynamic verification code to generate the first digital signature; and then based on the preset second irreversible The encryption algorithm encrypts the received dynamic verification code to obtain an encryption key, and uses the encryption key to encrypt the first digital signature to obtain the encrypted first digital signature.

It should be noted that when the terminal is a VSS client, if the functional configuration request of the VSS client terminal requires the consent of the VSS terminal, the monitoring platform sends the functional configuration request to the VSS terminal, and the request of the monitoring platform is approved by the VSS terminal, and according to The attribute information bound to the login account and the issued dynamic verification code authenticate the first digital signature, and configure functions for the terminal after the authentication is passed.

It should be noted that step 404 can be performed in any step after step 401 and before step 403.

In this embodiment, the first digital signature in the function configuration request is generated by the attribute information and the dynamic verification code, which ensures that the result of the monitoring platform’s authentication of the first digital signature is authentic and reliable, thereby improving the security of the function permission configuration process Sex.

The fifth embodiment of the present application relates to a method for a terminal to access a monitoring platform, which is applied to the monitoring platform. The method includes: generating a dynamic verification code during the process of logging in to the monitoring platform of the terminal and sending it to the terminal for the terminal according to the attributes of the terminal Information and the dynamic verification code to generate the first digital signature; receiving the access request containing the first digital signature sent by the terminal; authenticating the first digital signature according to the attribute information bound to the login account of the terminal and the issued dynamic verification code ; Send a response message to the terminal after the authentication is passed, so that the terminal can access the monitoring platform after receiving the response message.

The flowchart of the method for terminal access to the monitoring platform in this embodiment is shown in Fig. 6, including:

In step 501, a dynamic verification code is generated during the process of the terminal logging into the monitoring platform and issued to the terminal, so that the terminal can generate a first digital signature according to the terminal's attribute information and the dynamic verification code.

Specifically, in the process of terminal logging on to the monitoring platform, the MSP interface machine of the monitoring platform sends a login message to the CMS and RGM of the monitoring platform, and forwards the verification code returned by the CMS and RGM of the monitoring platform to the SMS interface machine of the monitoring platform , The SMS interface machine will issue the verification code to the APP software of the terminal. It should be noted that, in this embodiment, the dynamic verification code is generated during the terminal login to the monitoring platform, and the dynamic verification code is issued to the terminal through the preset channel; the preset channel is different from the request between the terminal and the monitoring platform Or the channel of response message interaction.

Step 502: Receive an access request containing the first digital signature sent by the terminal.

Step 503: Authenticate the first digital signature according to the attribute information bound to the login account of the terminal and the issued dynamic verification code.

Specifically, whether the first digital signature sent by the terminal is encrypted or not, that is, the first digital signature may be plaintext information or encrypted; the authentication method of the monitoring platform is also different. The first digital signature in this embodiment is plaintext information, and the specific process of authentication is: parsing the first signature to obtain the terminal's attribute information and the dynamic verification code received from the monitoring platform during the login to the monitoring platform; If the attribute information bound to the login account of the terminal is consistent and the received dynamic verification code is consistent with the issued dynamic verification code, the authentication is passed.

It should be noted that the relevant information bound to the login account of the terminal and the attribute information of the terminal is stored locally on the monitoring platform. The specific flow chart of the binding method of the login account of the terminal and the attribute information of the terminal is shown in Figure 7, including:

Step 5031: After receiving the registration request sent by the terminal, a dynamic verification code is issued for the terminal to generate a first digital signature according to the attribute information and the received dynamic verification code.

Step 5032: Receive the first digital signature and login account sent by the terminal.

Step 5033: Analyze the attribute information from the first digital signature, and bind the login account of the terminal with the attribute information of the terminal.

In one example, the first digital signature is obtained through encryption, the monitoring platform encrypts the issued dynamic verification code based on the same irreversible encryption algorithm to obtain the decryption key, and uses the decryption key to perform the encrypted first digital signature The inverse algorithm of the reversible encryption algorithm decrypts the first digital signature and restores it to readable plaintext information, so that the terminal's attribute information can be obtained, the login account and the terminal's attribute information are bound, and the information bound between the two Stored locally. In addition, the first digital signature may not be encrypted, and the monitoring platform can directly obtain the attribute information according to the first digital signature.

Step 504: After the authentication is passed, a response message is sent to the terminal, so that the terminal can access the monitoring platform after receiving the response message.

Specifically, the response message issued by the monitoring platform only informs the terminal that it can access the monitoring platform; when the terminal receives the issued response message, it immediately accesses the monitoring platform, or when the preset time is met. Platform, this embodiment does not make specific limitations.

In an example, a response message is issued to the terminal after the authentication is passed, so that the terminal can access the monitoring platform after receiving the response message, specifically: after the authentication is passed, the attribute information bound to the login account of the terminal and The issued dynamic verification code generates the second digital signature; a response message containing the second digital signature is issued to the terminal so that the terminal can authenticate the second digital signature according to the terminal’s attribute information and the received dynamic verification code, and then After passing the authentication, it is connected to the monitoring platform. It should be noted that the second digital signature can be plaintext information, or it can be generated by encrypting the attribute information bound to the login account of the terminal and the issued dynamic verification code plaintext information based on an irreversible encryption algorithm; it can also generate a second digital signature. After the digital signature, the monitoring platform encrypts the received dynamic verification code based on an irreversible encryption algorithm to obtain an encryption key, and uses the encryption key to encrypt the first digital signature to obtain an encrypted second digital signature.

In this embodiment, the first digital signature used to authenticate the identity during the access of the terminal and the monitoring platform includes both an immutable digital part and a real-time changing digital part, which can improve the reliability of identity authentication, thereby improving the terminal access to the monitoring platform Security. Further, the dynamic verification code is issued to the terminal through a preset channel; wherein the preset channel is different from the channel through which the request or the response message is exchanged between the terminal and the monitoring platform; Different channels reduce the risk of dynamic verification codes being stolen, thereby further improving the security of terminal access to the monitoring platform.

The sixth embodiment of the present application relates to a method for a terminal to access a monitoring platform. This embodiment is roughly the same as the fifth embodiment, but the difference is that the plaintext information formed by the combination of the attribute information and the received dynamic verification code is encrypted. After the monitoring platform receives the access request, it must be decrypted before the authentication can be performed. right.

The flowchart of the method for terminal access to the monitoring platform in this embodiment is shown in Fig. 8, and includes:

Steps

601, 602, and 604 are similar to

steps

501, 502, and 504, respectively, and will not be repeated here.

Step 603: Based on the preset first irreversible encryption algorithm, the plain text formed by combining the attribute information of the terminal's login account and the issued dynamic verification code is encrypted to generate an authentication password, and the authentication password is determined to be the same as the first Whether the digital signature matches; where, when the authentication password matches the first digital signature, it means that the authentication is passed.

In this embodiment, the monitoring platform needs to pass the same encryption algorithm and obtain the authentication password matching the first digital signature before the authentication is passed, which is beneficial to further improve the authenticity and reliability of the authentication result of the first digital signature, thereby further improving the authenticity and reliability of the authentication result of the first digital signature. Improve the security of terminal access to the monitoring platform.

The seventh embodiment of the present application relates to a method for a terminal to access a monitoring platform. This embodiment is roughly the same as the sixth embodiment, except that the terminal irreversibly encrypts the dynamic verification code to obtain the encryption key, and then uses the encryption key to encrypt the first digital signature to obtain the encrypted first digital signature .

The flowchart of the method for terminal access to the monitoring platform in this embodiment is shown in Fig. 9 and includes:

Steps

701, 702, 704, and 705 are similar to

steps

601, 602, 603, and 604, respectively, and will not be repeated here.

Step 703: Encrypt the issued dynamic verification code based on the preset second irreversible encryption algorithm to obtain a decryption key, and use the decryption key to decrypt the encrypted first digital signature to obtain the first digital signature.

Specifically, the first digital signature included in the access request is encrypted by the terminal. In this embodiment, the monitoring platform needs to decrypt twice to obtain the first digital signature, and then pass the authentication through the same encryption algorithm and obtain the authentication password matching the first digital signature, which is beneficial to further improve the first digital signature. The authenticity and reliability of the digital signature authentication result, thereby further improving the security of the terminal's access to the monitoring platform.

The eighth implementation manner of the present application relates to a method for a terminal to access a monitoring platform. This embodiment is roughly the same as the fifth embodiment. The difference is: the method includes: receiving a function configuration request containing the first digital signature sent by the terminal; A digital signature is used for authentication, and functions are configured for the terminal after the authentication is passed.

The flowchart of the method for terminal access to the monitoring platform in this embodiment is shown in FIG. 10 and includes:

Steps 801-804 are similar to steps 501-504, respectively, and will not be repeated here.

Step 805: Receive a function configuration request including the first digital signature sent by the terminal.

In step 806, the first digital signature is authenticated according to the attribute information bound to the login account and the issued dynamic verification code, and functions are configured for the terminal after the authentication is passed.

It should be noted that step 805 and step 806 can be performed in any step after step 801 and before step 804.

The division of the steps of the various methods above is just for clarity of description. When implemented, it can be combined into one step or some steps can be split and decomposed into multiple steps. As long as they include the same logical relationship, they are all within the scope of protection of this patent. ; Adding insignificant modifications to the algorithm or process or introducing insignificant design, but not changing the core design of the algorithm and process are within the scope of protection of the patent.

The ninth implementation manner of the present application relates to an electronic device. As shown in FIG. 11, it includes at least one processor 902; and a memory 901 communicatively connected with the at least one processor; The instructions executed by 902 are executed by the at least one processor 902, so that the at least one processor 902 can execute the foregoing implementation of the cell search method.

The memory 901 and the processor 902 are connected in a bus manner. The bus may include any number of interconnected buses and bridges. The bus connects one or more processors 902 and various circuits of the memory 901 together. The bus can also connect various other circuits such as peripheral devices, voltage regulators, power management circuits, etc., which are all well-known in the art, and therefore, no further description will be given herein. The bus interface provides an interface between the bus and the transceiver. The transceiver may be one element or multiple elements, such as multiple receivers and transmitters, providing a unit for communicating with various other devices on the transmission medium. The data processed by the processor 902 is transmitted on the wireless medium through the antenna, and further, the antenna also receives the data and transmits the data to the processor 902.

The processor 902 is responsible for managing the bus and general processing, and can also provide various functions, including timing, peripheral interfaces, voltage regulation, power management, and other control functions. The memory 901 may be used to store data used by the processor 902 when performing operations.

The tenth implementation manner of the present application relates to a platform. As shown in FIG. 12, it includes at least one processor 1002; and, a memory 1001 communicatively connected with the at least one processor; wherein, the memory 1001 stores data that can be used by at least one processor 1002. The executed instructions are executed by the at least one processor 1002, so that the at least one processor 1002 can execute the foregoing implementation of the cell search method.

Wherein, the memory 1001 and the processor 1002 are connected in a bus manner, and the bus may include any number of interconnected buses and bridges, and the bus connects one or more various circuits of the processor 1002 and the memory 1001 together. The bus can also connect various other circuits such as peripheral devices, voltage regulators, power management circuits, etc., which are all well-known in the art, and therefore, no further description will be given herein. The bus interface provides an interface between the bus and the transceiver. The transceiver may be one element or multiple elements, such as multiple receivers and transmitters, providing a unit for communicating with various other devices on the transmission medium. The data processed by the processor 1002 is transmitted on the wireless medium through the antenna, and further, the antenna also receives the data and transmits the data to the processor 1002.

The processor 1002 is responsible for managing the bus and general processing, and can also provide various functions, including timing, peripheral interfaces, voltage regulation, power management, and other control functions. The memory 1001 may be used to store data used by the processor 1002 when performing operations.

The eleventh embodiment of the present application relates to a computer-readable storage medium storing a computer program. When the computer program is executed by the processor, the above method embodiment is realized.

That is, those skilled in the art can understand that all or part of the steps in the method of the foregoing embodiments can be implemented by instructing relevant hardware through a program. The program is stored in a storage medium and includes several instructions to enable a device ( It may be a single-chip microcomputer, a chip, etc.) or a processor (processor) that executes all or part of the steps of the methods described in the embodiments of the present application. The aforementioned storage media include: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), magnetic disks or optical disks and other media that can store program codes. .

Those of ordinary skill in the art can understand that the above-mentioned embodiments are specific examples for realizing the present application, and in actual applications, various changes can be made in form and details without departing from the spirit and spirit of the present application. range.

Claims

A method for a terminal to access a monitoring platform, which is applied to a terminal, and the method includes:

Generating a first digital signature according to the attribute information of the terminal and the dynamic verification code received from the monitoring platform in the process of logging in to the monitoring platform;

Send an access request that includes the first digital signature to the monitoring platform, so that the monitoring platform can perform a check on the first digital signature according to the attribute information bound to the terminal’s login account and the issued dynamic verification code. Digital signature for authentication;

Receive the response message issued by the monitoring platform after the authentication is passed, and access the monitoring platform.
The method for a terminal to access a monitoring platform according to claim 1, wherein receiving a response message issued by the monitoring platform after the authentication is passed and accessing the monitoring platform comprises:

Receive the response message containing the second digital signature issued by the monitoring platform after the authentication is passed, and authenticate the second digital signature according to the attribute information of the terminal and the received dynamic verification code, and Access to the monitoring platform after the authentication is passed; wherein the second digital signature is generated by the attribute information bound to the login account of the terminal and the issued dynamic verification code.
The method for a terminal to access a monitoring platform according to claim 1 or 2, wherein the dynamic verification code received from the monitoring platform according to the attribute information of the terminal and the process of logging in to the monitoring platform generates the first number Signature, including:

Encrypting the plaintext information formed by combining the attribute information of the terminal and the received dynamic verification code based on a preset first irreversible encryption algorithm to generate the first digital signature.
The method for terminal access to a monitoring platform according to claim 3, wherein, in the plaintext formed by combining the attribute information of the terminal and the received dynamic verification code based on the preset first irreversible encryption algorithm The information is encrypted, and after the first digital signature is generated, the method further includes:

Encrypt the received dynamic verification code based on a preset second irreversible encryption algorithm to obtain an encryption key, and use the encryption key to encrypt the first digital signature to obtain the encrypted first digital signature ；

The sending the access request including the first digital signature to the monitoring platform includes: sending the access request including the encrypted first digital signature to the monitoring platform.
The method for a terminal to access a monitoring platform according to claim 1 or 2, wherein the binding manner of the login account of the terminal and the attribute information of the terminal includes:

Sending a registration request to the monitoring platform for the monitoring platform to issue the dynamic verification code after receiving the registration request;

Receiving the dynamic verification code from the monitoring platform;

Generating a first digital signature according to the attribute information and the received dynamic verification code;

The first digital signature and the login account of the terminal are sent to the monitoring platform, so that the monitoring platform can parse the attribute information from the first digital signature, and send the login account of the terminal Binding with the attribute information of the terminal.
The method for a terminal to access a monitoring platform according to claim 1 or 2, wherein the first step is generated according to the attribute information of the terminal and the dynamic verification code received from the monitoring platform in the process of logging in to the monitoring platform. After the digital signature, it also includes:

Send a function configuration request including the first digital signature to the monitoring platform, so that the monitoring platform can compare the first digital signature with the attribute information bound to the login account and the issued dynamic verification code. The digital signature is used for authentication, and functions are configured for the terminal after the authentication is passed.
The method for a terminal to access a monitoring platform according to claim 1 or 2, wherein the first step is generated according to the attribute information of the terminal and the dynamic verification code received from the monitoring platform in the process of logging in to the monitoring platform. Digital signature, including:

According to the attribute information of the terminal and the dynamic verification code received from the monitoring platform through a preset channel during the login process of the monitoring platform, a first digital signature is generated; wherein, the preset channel is different from the terminal and The channel through which the request or the response message exchanges between the monitoring platforms.
The method for a terminal to access a monitoring platform according to claim 1, wherein the verification code is obtained by the monitoring platform by hashing a random salt value generated according to the time stamp information.
A method for a terminal to access a monitoring platform, which is applied to the monitoring platform, and the method includes:

Generating a dynamic verification code during the process of logging in to the monitoring platform by the terminal and issuing it to the terminal, so that the terminal can generate a first digital signature according to the attribute information of the terminal and the dynamic verification code;

Receiving an access request including the first digital signature sent by the terminal;

Authenticate the first digital signature according to the attribute information bound to the login account of the terminal and the issued dynamic verification code;

After passing the authentication, a response message is issued to the terminal, so that the terminal can access the monitoring platform after receiving the response message.
The method for a terminal to access a monitoring platform according to claim 9, wherein, after the authentication is passed, a response message is sent to the terminal, so that the terminal can access the terminal after receiving the response message. Monitoring platform, including:

Generate a second digital signature according to the attribute information bound to the login account of the terminal and the issued dynamic verification code after the authentication is passed;

A response message containing the second digital signature is issued to the terminal, so that the terminal can authenticate the second digital signature according to the terminal's attribute information and the received dynamic verification code, and then Access the monitoring platform after passing the authentication.
The method for terminal access to a monitoring platform according to claim 9 or 10, wherein the first digital signature is performed on the first digital signature according to the attribute information bound to the login account of the terminal and the issued dynamic verification code Authentication, including:

Based on the preset first irreversible encryption algorithm, the plain text formed by combining the attribute information of the terminal's login account and the issued dynamic verification code is encrypted to generate an authentication password, and the authentication password is determined Whether it matches with the first digital signature; wherein, when the authentication password matches the first digital signature, it means that the authentication is passed.
The method for a terminal to access a monitoring platform according to claim 11, wherein the first digital signature included in the access request is encrypted by the terminal;

Before the authenticating the first digital signature according to the attribute information bound to the login account of the terminal and the issued dynamic verification code, the method further includes:

Encrypt the issued dynamic verification code based on a preset second irreversible encryption algorithm to obtain a decryption key, and use the decryption key to decrypt the encrypted first digital signature to obtain the first digital signature.
The method for a terminal to access a monitoring platform according to claim 9 or 10, wherein the binding manner of the login account of the terminal and the attribute information of the terminal includes:

Issuing the dynamic verification code after receiving the registration request sent by the terminal, so that the terminal can generate a first digital signature according to the attribute information and the received dynamic verification code;

Receiving the first digital signature and the login account sent by the terminal;

The attribute information is parsed from the first digital signature, and the login account of the terminal is bound to the attribute information of the terminal.
The method for a terminal to access a monitoring platform according to claim 9 or 10, wherein the dynamic verification code is generated during the process of the terminal logging into the monitoring platform and issued to the terminal for the terminal to follow After the attribute information of the terminal and the dynamic verification code generate the first digital signature, the method further includes:

Receiving a function configuration request including the first digital signature sent by the terminal;

The first digital signature is authenticated according to the attribute information bound to the login account and the issued dynamic verification code, and functions are configured for the terminal after the authentication is passed.
The method for a terminal to access a monitoring platform according to claim 9 or 10, wherein the generating and issuing a dynamic verification code to the terminal during the process of the terminal logging into the monitoring platform includes:

A dynamic verification code is generated when the terminal logs in to the monitoring platform, and the dynamic verification code is issued to the terminal through a preset channel; wherein the preset channel is different from the terminal and the monitoring platform The request or the response message exchange channel between.
An electronic device, wherein the electronic device is a terminal, and includes:

At least one processor; and,

A memory communicatively connected with the at least one processor; wherein,

The memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor, so that the at least one processor can execute any one of claims 1 to 8. Of the terminal access to the monitoring platform.
A platform, wherein the platform is a monitoring platform, including:

At least one processor; and,

A memory communicatively connected with the at least one processor; wherein,

The memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor, so that the at least one processor can execute any one of claims 9 to 15 The method for the terminal to access the monitoring platform.
A computer-readable storage medium storing a computer program, wherein when the computer program is executed by a processor, the method for terminal access to a monitoring platform according to any one of claims 1 to 8 is realized, or claim 9 is realized The method for terminal access to the monitoring platform described in any one of to 15.