CN109698978A - A kind of access authentication system and method for engineering menu - Google Patents
A kind of access authentication system and method for engineering menu Download PDFInfo
- Publication number
- CN109698978A CN109698978A CN201811612021.3A CN201811612021A CN109698978A CN 109698978 A CN109698978 A CN 109698978A CN 201811612021 A CN201811612021 A CN 201811612021A CN 109698978 A CN109698978 A CN 109698978A
- Authority
- CN
- China
- Prior art keywords
- password
- preset time
- preset
- verified
- access
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
- H04N21/441—Acquiring end-user identification, e.g. using personal code sent by the remote control or by inserting a card
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/083—Network architectures or network communication protocols for network security for authentication of entities using passwords
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0861—Network architectures or network communication protocols for network security for authentication of entities using biometrical features, e.g. fingerprint, retina-scan
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0876—Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
- H04N21/441—Acquiring end-user identification, e.g. using personal code sent by the remote control or by inserting a card
- H04N21/4415—Acquiring end-user identification, e.g. using personal code sent by the remote control or by inserting a card using biometric characteristics of the user, e.g. by voice recognition or fingerprint scanning
Abstract
The present invention provides a kind of access authentication system and method for engineering menu, comprising: mobile terminal and set-top box；Mobile terminal, for when getting operation maintenance personnel input identity information, it determines in the information prestored, with the presence or absence of target identity information corresponding with identity information, if so, determining the first present system time of equipment, and according to the first present system time and preset Encryption Algorithm, it determines and obtains the corresponding password to be verified of password request, and show password to be verified；Set-top box, for determining the second present system time of equipment, according to the second present system time and Encryption Algorithm, determining the access password of preset engineering menu in the password to be verified of mobile terminal displaying for getting operation maintenance personnel input；Whether corresponding with access password determine password to be verified, if so, showing engineering menu, otherwise, output haves no right to access engineering menu.This programme can be improved the safety of set-top box.
Description
Technical field
The present invention relates to set-top box technique field, in particular to the access authentication system and method for a kind of engineering menu.
Background technique
With the rapid development in DTV market, set-top box is widely deployed in every family.Set-top box is not
It is only user terminal or the network terminal, it can make simulated television turn to interactive digital electricity from the passive simulated television that receives
Depending on (such as video on demand), and internet can be accessed, user is made to enjoy the comprehensive information services such as TV, data, language.
Currently, the engineering menu of set-top box generallys use static password mode.When set-top box occurs abnormal, user can be with
Operation maintenance personnel is contacted, engineering menu is accessed using the corresponding static password of the set-top box engineering menu by operation maintenance personnel, to machine
Top box repairs management.
But access set-top box engineering menu is unable to time update associated cryptographic, is awarded non-by the way of static password
After power person gets the static password of access engineering menu, it can be always maintained at the addressable permission to engineering menu, to drop
The low safety of set-top box.
Summary of the invention
The embodiment of the invention provides a kind of access authentication system and method for engineering menu, can be improved set-top box
Safety.
In a first aspect, the real-time example of the present invention provides a kind of access authentication system of engineering menu, comprising: mobile terminal and
Set-top box；
The mobile terminal, for determining in the information prestored when getting operation maintenance personnel input identity information, if
In the presence of target identity information corresponding with the identity information, if so, determining the first present system time of equipment, and root
According to first present system time and preset Encryption Algorithm, the corresponding password to be verified of the acquisition password request is determined,
And show the password to be verified；
The set-top box, it is described to be verified for being shown in the mobile terminal for getting the operation maintenance personnel input
When password, the second present system time of equipment is determined, according to second present system time and the Encryption Algorithm, determine
The access password of preset engineering menu；Determine whether the password to be verified is corresponding with the access password, if so, exhibition
Show the engineering menu, otherwise, output haves no right to access engineering menu.
Preferably,
The mobile terminal is further used for storing at least one preset time point and at least one preset time period,
In, the preset time point is corresponding with a preset time period；From at least one described preset time period, institute is determined
State the first preset time period where the first present system time；From at least one described preset time point, described is determined
The corresponding first preset time point of one preset time period；According to the first preset time point and preset Encryption Algorithm, determine
The corresponding password to be verified of the acquisition password request.
Preferably,
The mobile terminal, for being encrypted using preset Encryption Algorithm to the first preset time point, described in acquisition
Obtain the corresponding password to be verified of password request.
Preferably,
The set-top box is further used for storing at least one described preset time point and at least one described preset time
Section；From at least one described preset time period, the second preset time period where second present system time is determined；From
In at least one described preset time point, the corresponding second preset time point of second preset time period is determined；Using described
Encryption Algorithm encrypts the second preset time point, determines the access password of preset engineering menu；It determines described to be verified
Whether password is identical as the access password, if so, showing the engineering menu, otherwise, output haves no right to access engineering menu.
Preferably,
The identity information, comprising: the name of the operation maintenance personnel, identification card number, ID mark, preset secret password and
It is any one or more in biological characteristic.
Second aspect, the embodiment of the invention provides a kind of access authentication methods of engineering menu, comprising:
It is determined in the information prestored by mobile terminal when getting operation maintenance personnel input acquisition password request, if
In the presence of target identity information corresponding with the identity information；
By mobile terminal, determining that there are the first present system times for when target identity information, determining equipment；
By mobile terminal, according to first present system time and preset Encryption Algorithm, determine that the acquisition is close
Code requests corresponding password to be verified, and shows the password to be verified；
Equipment is determined when getting the password to be verified of the operation maintenance personnel input by the set-top box
Second present system time；
Preset engineering is determined according to second present system time and the Encryption Algorithm by the set-top box
The access password of menu；
By the set-top box, determine whether the password to be verified is corresponding with the access password, if so, showing
The engineering menu, otherwise, output have no right to access engineering menu.
Preferably,
Before the first present system time of the determining equipment, further comprise:
Store at least one preset time point and at least one preset time period, wherein the preset time point and one
The preset time period is corresponding；
After the first present system time of the determining equipment, it is described according to first present system time and
Preset Encryption Algorithm further comprises before determining the corresponding password to be verified of the acquisition password request:
From at least one described preset time period, the first preset time where first present system time is determined
Section；
From at least one described preset time point, corresponding first preset time of first preset time period is determined
Point；
Then,
It is described according to first present system time and preset Encryption Algorithm, determine that the acquisition password request is corresponding
Password to be verified, comprising:
According to the first preset time point and preset Encryption Algorithm, determine that the acquisition password request is corresponding to be tested
Demonstrate,prove password.
Preferably,
It is described according to the first preset time point and preset Encryption Algorithm, determine that the acquisition password request is corresponding
Password to be verified, comprising:
The first preset time point is encrypted using preset Encryption Algorithm, it is corresponding to obtain the acquisition password request
Password to be verified.
Preferably,
Described according to second present system time and the Encryption Algorithm, the access of preset engineering menu is determined
Before password, further comprise:
Store at least one described preset time point and at least one described preset time period；
After the second present system time of the determining equipment, it is described according to second present system time and
The Encryption Algorithm before the access password for determining preset engineering menu, further comprises:
From at least one described preset time period, the second preset time where second present system time is determined
Section；
From at least one described preset time point, corresponding second preset time of second preset time period is determined
Point；
Then,
It is described according to second present system time and the Encryption Algorithm, determine that the access of preset engineering menu is close
Code, comprising:
The second preset time point is encrypted using the Encryption Algorithm, determines that the access of preset engineering menu is close
Code；
Whether the determination password to be verified is corresponding with the access password, if so, showing the engineering dish
Single, otherwise, output haves no right to access engineering menu, comprising:
Whether identical as the access password determine the password to be verified, if so, show the engineering menu, it is no
Then, output haves no right to access engineering menu.
Preferably,
The identity information, comprising: the name of the operation maintenance personnel, identification card number, ID mark, preset secret password and
It is any one or more in biological characteristic.
In embodiments of the present invention, mobile terminal is when getting the acquisition password request of operation maintenance personnel input, Ke Yixian
The identity information for needing first to obtain operation maintenance personnel is obtained, so as to verify to its identity, and if only if determining operation maintenance personnel
When identity is legal, the first present system time of equipment is determined, so that true using the first system time and preset Encryption Algorithm
Determine password to be verified required for operation maintenance personnel, is tested since the identity of the operation maintenance personnel of the password to be verified got has passed through
Card, and the system time of mobile terminal is variation, so the password to be verified that mobile terminal determines is not fixed, thus
It can be always maintained at the addressable permission to set-top box engineering menu to avoid unauthorized person after getting password to be verified, from
And it can be improved the safety of set-top box；Operation maintenance personnel, can after getting the interim password to be verified that mobile terminal determines
With by Password Input to be verified to set-top box, so that set-top box when getting password to be verified, determines the of set-top box device
Two present system times recycle the second present system time and Encryption Algorithm, determine the access password of preset engineering menu,
Finally according to access password and password to be verified, that is, it can determine whether operation maintenance personnel has the permission of access engineering menu, due to
The system time of set-top box is also variation, therefore the access password that set-top box determines is also not fixed, so as into one
Step avoids unauthorized personnel using same password to be verified, is always maintained at the addressable permission to the engineering menu of set-top box, from
And it can be further improved the safety of set-top box.
Detailed description of the invention
In order to more clearly explain the embodiment of the invention or the technical proposal in the existing technology, to embodiment or will show below
There is attached drawing needed in technical description to be briefly described, it should be apparent that, the accompanying drawings in the following description is the present invention
Some embodiments for those of ordinary skill in the art without creative efforts, can also basis
These attached drawings obtain other attached drawings.
Fig. 1 is a kind of structural body schematic diagram of the access authentication system for engineering menu that one embodiment of the invention provides；
Fig. 2 is the structural body schematic diagram of the access authentication system for another engineering menu that one embodiment of the invention provides；
Fig. 3 is a kind of flow chart of the access authentication method for engineering menu that one embodiment of the invention provides.
Specific embodiment
In order to make the object, technical scheme and advantages of the embodiment of the invention clearer, below in conjunction with the embodiment of the present invention
In attached drawing, technical scheme in the embodiment of the invention is clearly and completely described, it is clear that described embodiment is
A part of the embodiment of the present invention, instead of all the embodiments, based on the embodiments of the present invention, those of ordinary skill in the art
Every other embodiment obtained without making creative work, shall fall within the protection scope of the present invention.
As shown in Figure 1, the embodiment of the invention provides a kind of access authentication systems of engineering menu, comprising: mobile terminal
And set-top box；
The mobile terminal 101, for determining in the information prestored when getting operation maintenance personnel input identity information,
With the presence or absence of target identity information corresponding with the identity information, if so, determine the first present system time of equipment,
And according to first present system time and preset Encryption Algorithm, determine that the acquisition password request is corresponding to be verified close
Code, and show the password to be verified；
The set-top box 102, described in being shown in the mobile terminal 101 for getting the operation maintenance personnel input
When password to be verified, the second present system time of equipment is determined, calculated according to second present system time and the encryption
Method determines the access password of preset engineering menu；Determine whether the password to be verified is corresponding with the access password, such as
Fruit is to show the engineering menu, and otherwise, output haves no right to access engineering menu.
In embodiments of the present invention, mobile terminal is when getting the acquisition password request of operation maintenance personnel input, Ke Yixian
The identity information for needing first to obtain operation maintenance personnel is obtained, so as to verify to its identity, and if only if determining operation maintenance personnel
When identity is legal, the first present system time of equipment is determined, so that true using the first system time and preset Encryption Algorithm
Determine password to be verified required for operation maintenance personnel, is tested since the identity of the operation maintenance personnel of the password to be verified got has passed through
Card, and the system time of mobile terminal is variation, so the password to be verified that mobile terminal determines is not fixed, thus
It can be always maintained at the addressable permission to set-top box engineering menu to avoid unauthorized person after getting password to be verified, from
And it can be improved the safety of set-top box；Operation maintenance personnel, can after getting the interim password to be verified that mobile terminal determines
With by Password Input to be verified to set-top box, so that set-top box when getting password to be verified, determines the of set-top box device
Two present system times recycle the second present system time and Encryption Algorithm, determine the access password of preset engineering menu,
Finally according to access password and password to be verified, that is, it can determine whether operation maintenance personnel has the permission of access engineering menu, due to
The system time of set-top box is also variation, therefore the access password that set-top box determines is also not fixed, so as into one
Step avoids unauthorized personnel using same password to be verified, is always maintained at the addressable permission to the engineering menu of set-top box, from
And it can be further improved the safety of set-top box.
It should be noted that mobile terminal can be smart phone, tablet computer, laptop etc., but do not limit to
In this.
In an embodiment of the present invention, the mobile terminal is further used for storing at least one preset time point and extremely
A few preset time period, wherein the preset time point is corresponding with a preset time period；From it is described at least one
In preset time period, the first preset time period where first present system time is determined；At least one is default from described
In time point, the corresponding first preset time point of first preset time period is determined；According to the first preset time point and
Preset Encryption Algorithm determines the corresponding password to be verified of the acquisition password request.
In embodiments of the present invention, mobile terminal, can be according to storage after determining the first present system time of equipment
Preset time period, the first preset time period where the first present system time is determined, further according to the preset time point of storage
The first preset time point corresponding with the first preset time period is determined, so as to determine operation maintenance personnel according to the first preset time point
Required password to be verified, since the system time of mobile terminal is variation, so mobile terminal determination is to be verified close
Code be not it is unalterable, there is timeliness, therefore can keep using static password to addressing machine to avoid unauthorized person
The addressable permission of the engineering menu of top box, so as to improve the safety of set-top box.
For example, preset time point November 12 11 minutes " 11121311 " and right can be stored in advance at 13 points in mobile terminal
1 point to 1 point of the preset time period answered 30 minutes；
Preset time point 7 points 10 minutes " 12010710 " on December 1 and 8 points to 9 points of corresponding preset time period；
In 8: 20 timesharing of the first present system time of equipment of itself, can from 1 point to 1 point of preset time period 30 minutes and
In 8 points to 9 points of preset time period, when determining 8 points to 9 of preset time period where the first present system time first it is default when
Between section, and the first preset time period is corresponding with preset time point " 12010710 ", thus may determine that preset time point
" 12010710 " are the first preset time point.
In an embodiment of the present invention, the mobile terminal, for default to described first using preset Encryption Algorithm
Time point encryption obtains the corresponding password to be verified of the acquisition password request.
In embodiments of the present invention, mobile terminal can be using preset Encryption Algorithm to the first preset time point encryption side
Formula obtains the corresponding password to be verified of acquisition password request of operation maintenance personnel input, since outside can not learn password to be verified
Encryption Algorithm and the parameters such as the first preset time point, therefore password to be verified can not be determined, so as to improve set-top box
Safety.
In an embodiment of the present invention, the set-top box, be further used for storing at least one described preset time point and
At least one described preset time period；From at least one described preset time period, the second present system time institute is determined
The second preset time period；From at least one described preset time point, second preset time period corresponding is determined
2 preset time points；The second preset time point is encrypted using the Encryption Algorithm, determines the visit of preset engineering menu
Ask password；Whether identical as the access password determine the password to be verified, if so, show the engineering menu, otherwise,
Output haves no right to access engineering menu.
In embodiments of the present invention, similarly, set-top box can store preset time point identical with mobile terminal and right
The preset time period answered first can determine second from the preset time period of storage in this way after determining the second present system time
The second preset time period where present system time, and determined and the second preset time period phase from the preset time of storage point
Corresponding second preset time point recycles Encryption Algorithm identical with mobile terminal to encrypt the second preset time point, obtains
The access password of engineering menu is determining password to be verified since password to be verified and access password all have timeliness
When identical as access password, engineering menu can be shown, in order to operation maintenance personnel operation, and when password to be verified and access password
It when not identical, can determine that password to be verified has failed, therefore the prompt information for having no right to access engineering menu can be exported, so that
Operation maintenance personnel understands password to be verified and timeliness is already expired, and needs to reacquire new password to be verified from mobile terminal.
In an embodiment of the present invention, the identity information, comprising: name, identification card number, the ID mark of the operation maintenance personnel
Know, is in preset secret password and biological characteristic any one or more.
In embodiments of the present invention, the identity information of operation maintenance personnel can be the name of operation maintenance personnel, identification card number, in advance
ID mark (for example, GS001), the secret password of operation maintenance personnel oneself setting of setting, can also be fingerprint, the face of operation maintenance personnel
The biological characteristics such as portion's feature, iris, pulse, vocal print are verified the identity of operation maintenance personnel in a manner of a variety of authentications to make to provide, are mentioned
The safety of high set-top box.
In order to more clearly illustrate technical solution of the present invention and advantage, it is by smart phone of mobile terminal below
Example, to the access authentication system of utilizing works menu, how the identity of the operation maintenance personnel of authentication-access engineering menu is carried out specifically
It is bright, as shown in Fig. 2, can specifically include:
Smart phone 201, for executing:
D0: at least one preset time point and at least one preset time period are stored, wherein preset time point and one are pre-
If the period is corresponding.
For example, preset time point " " and " 3 points to 4 of corresponding preset time period can be stored in advance at 1 point in smart phone
Point ", preset time point " 2 points " and corresponding preset time period " 5 points to 6 points ", preset time point " 3 points " and it is corresponding default when
Between section " 7 points to 8 points ".
D1: when getting operation maintenance personnel input acquisition password request, the identity information of operation maintenance personnel is obtained.
Specifically, smart phone can first obtain O&M people when getting the acquisition password request of operation maintenance personnel input
Name, identification card number, preset ID mark, preset secret password, face-image, iris, fingerprint, palmmprint and the vocal print of member
Any one or more identity informations in equal biological characteristics so that by the identity information that obtains to the identity of operation maintenance personnel into
Row verifying.
For example, smart phone obtains the identity information " fingerprint " of operation maintenance personnel.
D2: it determines in the information prestored, if there is target identity information corresponding with identity information, if so, holding
Row D3.
For example, smart phone can carry out identity to operation maintenance personnel and test after getting " fingerprint " of operation maintenance personnel
Card, i.e., determine whether there is " target fingerprint " corresponding with " fingerprint ", if it is determined that the information prestored from the information prestored
It is middle to there is " target fingerprint ", then illustrate that the identity of operation maintenance personnel is legal, thus may determine that the first present system time of equipment
" 3 points 20 minutes ".
D3: the first present system time of equipment is determined.
D4: from least one preset time period, the first preset time period where the first present system time is determined.
For example, smart phone is from preset time period " 3 points to 4 points ", " 5 points to 6 points " and " 7 points to 8 points ", can be with
Determine the first present system time " 20 minutes " in the first preset time period " " at 3 points at 3 points to 4 points.
D5: from least one preset time point, the corresponding first preset time point of the first preset time period is determined.
For example, smart phone can be determined and be preset with first from preset time point " 1 point ", " 2 points " and " 3 points "
Time point " 3 points to 4 points " corresponding first preset time point " 1 point ".
D6: encrypting the first preset time point using preset Encryption Algorithm, and it is corresponding to be tested to obtain acquisition password request
Password is demonstrate,proved, and shows password to be verified.
For example, smart phone can use preset Encryption Algorithm after determining the first preset time point " " at 1 point
" XX12G " encrypts the first preset time point " " at 1 point, obtains password to be verified " 123456 ", and show password to be verified
" 123456 ", in order to operation maintenance personnel understanding.
Set-top box 202, for executing:
S0: at least one preset time point and at least one preset time period are stored.
For example, set-top box stores identical preset time point " " and corresponding preset time period at 1 point with smart phone
" 3 points to 4 points ", preset time point " 2 points " and corresponding preset time period " 5 points to 6 points ", preset time point " 3 points " and correspondence
Preset time period " 7 points to 8 points " simplify in order to calculate identical password using Encryption Algorithm identical with smart phone
The complexity for accessing password verifying the password to be verified of operation maintenance personnel input and itself determining, shortens the verifying of password to be verified
Time, so as to as early as possible show preset engineering menu when determining that the password authentification to be verified of operation maintenance personnel input passes through
Operation maintenance personnel is convenient for its operational administrative.
S1: in the password to be verified that the smart phone 202 for getting operation maintenance personnel input is shown, the second of equipment is determined
Present system time.
For example, set-top box determines equipment when getting password to be verified " 123456 " of operation maintenance personnel input
Second present system time " 3 points 22 minutes ", so as to calculate the access of engineering menu at 3 points using the second present system time " 22 minutes "
Password.
S2: from least one preset time point, the second preset time period where the second present system time is determined.
For example, set-top box, can be true from preset time point " 3 points to 4 points ", " 5 points to 6 points " and " 7 points to 8 points "
Fixed second present system time " 3 points 22 minutes " is in the second preset time period " 3 points to 4 points ".
S3: from least one preset time point, the corresponding second preset time point of the second preset time period is determined.
For example, it in set-top box preset time point " 1 point ", " 2 points " and " 3 points ", can determine and the second preset time
The corresponding second preset time point " 1 point " of point " 3 points to 4 points ".
S4: the second preset time point is encrypted using Encryption Algorithm, determines the access password of preset engineering menu.
For example, set-top box can use add identical with smart phone after determining the second preset time point " " at 1 point
Close algorithm " XX12G " encrypts the second preset time point " " at 1 point, obtains the access password " 123456 " of engineering menu.
Whether identical as access password S5: determining password to be verified, if so, executing, otherwise S6, executes S7.
For example, set-top box compares password " 123456 " to be verified and access password " 123456 ", can determine to be tested
Demonstrate,proving password " 123456 " and access password " 123456 " is same password, therefore can show engineering menu, in order to O&M people
Member's operation.
And when password to be verified and not identical access password, then password to be verified may be already expired timeliness, therefore can be with
The reason of input haves no right to access engineering menu, can not access engineering menu in order to outside understanding.
S6: engineering menu is shown.
S7: output haves no right to access engineering menu.
As shown in figure 3, the embodiment of the invention provides a kind of access authentication methods of engineering menu, comprising:
Step 301: the letter prestored is determined when getting operation maintenance personnel input acquisition password request by mobile terminal
In breath, if there is target identity information corresponding with the identity information；
Step 302: by mobile terminal, in determination, there are when the target identity information, determine equipment first is current
System time；
Step 303: institute is determined according to first present system time and preset Encryption Algorithm by mobile terminal
It states and obtains the corresponding password to be verified of password request, and show the password to be verified；
Step 304: by the set-top box, when getting the password to be verified of the operation maintenance personnel input, really
Second present system time of locking equipment；
Step 305: being determined pre- by the set-top box according to second present system time and the Encryption Algorithm
If engineering menu access password；
Step 306: by the set-top box, determining whether the password to be verified is corresponding with the access password, such as
Fruit is to execute step 307, otherwise, executes step 308；
Step 307: showing the engineering menu；
Step 308: output haves no right to access engineering menu.
It in embodiments of the present invention, can through mobile terminal when getting the acquisition password request of operation maintenance personnel input
First to obtain the identity information for needing first to obtain operation maintenance personnel, so as to verified to its identity, and if only if determining O&M people
When the identity of member is legal, the first present system time of equipment is determined, so as to calculate using the first system time and preset encryption
Method determines password to be verified required for operation maintenance personnel, since the identity of the operation maintenance personnel of the password to be verified got has passed through
Verifying, and the system time of mobile terminal be variation, so mobile terminal determine password to be verified be not it is fixed, from
And it can be always maintained at the addressable permission to set-top box engineering menu to avoid unauthorized person after getting password to be verified,
So as to improve the safety of set-top box；Operation maintenance personnel after getting the interim password to be verified that mobile terminal determines,
It can be by Password Input to be verified to set-top box, so that set-top box when getting password to be verified, determines set-top box device
Second present system time recycles the second present system time and Encryption Algorithm, determines that the access of preset engineering menu is close
Code can determine whether operation maintenance personnel has the permission of access engineering menu finally according to access password and password to be verified, by
In the system time of set-top box be also variation, therefore set-top box determine access password be also not fixed, so as into
One step avoids unauthorized personnel using same password to be verified, is always maintained at the addressable permission to the engineering menu of set-top box,
So as to further increase the safety of set-top box.
In an embodiment of the present invention, before the first present system time of the determining equipment, further comprise:
Store at least one preset time point and at least one preset time period, wherein the preset time point and one
The preset time period is corresponding；
After the first present system time of the determining equipment, it is described according to first present system time and
Preset Encryption Algorithm further comprises before determining the corresponding password to be verified of the acquisition password request:
From at least one described preset time period, the first preset time where first present system time is determined
Section；
From at least one described preset time point, corresponding first preset time of first preset time period is determined
Point；
Then,
It is described according to first present system time and preset Encryption Algorithm, determine that the acquisition password request is corresponding
Password to be verified, comprising:
According to the first preset time point and preset Encryption Algorithm, determine that the acquisition password request is corresponding to be tested
Demonstrate,prove password.
In an embodiment of the present invention, described according to the first preset time point and preset Encryption Algorithm, determine institute
It states and obtains the corresponding password to be verified of password request, comprising:
The first preset time point is encrypted using preset Encryption Algorithm, it is corresponding to obtain the acquisition password request
Password to be verified.
In an embodiment of the present invention, it is determined described according to second present system time and the Encryption Algorithm
Before the access password of preset engineering menu, further comprise:
Store at least one described preset time point and at least one described preset time period；
After the second present system time of the determining equipment, it is described according to second present system time and
The Encryption Algorithm before the access password for determining preset engineering menu, further comprises:
From at least one described preset time period, the second preset time where second present system time is determined
Section；
From at least one described preset time point, corresponding second preset time of second preset time period is determined
Point；
Then,
It is described according to second present system time and the Encryption Algorithm, determine that the access of preset engineering menu is close
Code, comprising:
The second preset time point is encrypted using the Encryption Algorithm, determines that the access of preset engineering menu is close
Code；
Whether the determination password to be verified is corresponding with the access password, if so, showing the engineering dish
Single, otherwise, output haves no right to access engineering menu, comprising:
Whether identical as the access password determine the password to be verified, if so, show the engineering menu, it is no
Then, output haves no right to access engineering menu.
In an embodiment of the present invention, the identity information, comprising: name, identification card number, the ID mark of the operation maintenance personnel
Know, is in preset secret password and biological characteristic any one or more.
The each embodiment of the present invention at least has the following beneficial effects:
1, in an embodiment of the present invention, mobile terminal, can when getting the acquisition password request of operation maintenance personnel input
First to obtain the identity information for needing first to obtain operation maintenance personnel, so as to verified to its identity, and if only if determining O&M people
When the identity of member is legal, the first present system time of equipment is determined, so as to calculate using the first system time and preset encryption
Method determines password to be verified required for operation maintenance personnel, since the identity of the operation maintenance personnel of the password to be verified got has passed through
Verifying, and the system time of mobile terminal be variation, so mobile terminal determine password to be verified be not it is fixed, from
And it can be always maintained at the addressable permission to set-top box engineering menu to avoid unauthorized person after getting password to be verified,
So as to improve the safety of set-top box；Operation maintenance personnel after getting the interim password to be verified that mobile terminal determines,
It can be by Password Input to be verified to set-top box, so that set-top box when getting password to be verified, determines set-top box device
Second present system time recycles the second present system time and Encryption Algorithm, determines that the access of preset engineering menu is close
Code can determine whether operation maintenance personnel has the permission of access engineering menu finally according to access password and password to be verified, by
In the system time of set-top box be also variation, therefore set-top box determine access password be also not fixed, so as into
One step avoids unauthorized personnel using same password to be verified, is always maintained at the addressable permission to the engineering menu of set-top box,
So as to further increase the safety of set-top box.
2, in an embodiment of the present invention, mobile terminal, can basis after determining the first present system time of equipment
The preset time period of storage determines the first preset time period where the first present system time, further according to storage it is default when
Between put and determine corresponding with the first preset time period the first preset time point, so as to determine O&M according to the first preset time point
Password to be verified required for personnel, since the system time of mobile terminal is variation, so mobile terminal determination is to be tested
Card password be not it is unalterable, there is timeliness, therefore can keep using static password to visit to avoid unauthorized person
The addressable permission of the engineering menu of set-top box is asked, so as to improve the safety of set-top box.
2, in an embodiment of the present invention, mobile terminal can add the first preset time point using preset Encryption Algorithm
Close mode, obtain operation maintenance personnel input the corresponding password to be verified of acquisition password request, due to outside can not learn it is to be verified
The parameters such as the Encryption Algorithm of password and the first preset time point, therefore can not determine password to be verified, so as to improve machine
The safety of top box.
3, in an embodiment of the present invention, mobile terminal, can when getting the acquisition password request of operation maintenance personnel input
To determine that operation maintenance personnel in front equipment end, therefore obtains the identity information of operation maintenance personnel so that identity information by obtaining and
Information is stored, determines whether the identity of operation maintenance personnel is legal, and if only if when determining that operation maintenance personnel identity is legal, determination is set
The first standby present system time, so as to determine corresponding password to be verified using the first present system time.
4, in an embodiment of the present invention, the identity information of operation maintenance personnel can be the name of operation maintenance personnel, identification card number,
Pre-set ID mark, the secret password of operation maintenance personnel oneself setting, can also be the fingerprint of operation maintenance personnel, facial characteristics,
The biological characteristics such as iris, pulse, vocal print verify the identity of operation maintenance personnel in a manner of a variety of authentications to make to provide, improve machine top
The safety of box.
It should be noted that, in this document, such as first and second etc relational terms are used merely to an entity
Or operation is distinguished with another entity or operation, is existed without necessarily requiring or implying between these entities or operation
Any actual relationship or order.Moreover, the terms "include", "comprise" or its any other variant be intended to it is non-
It is exclusive to include, so that the process, method, article or equipment for including a series of elements not only includes those elements,
It but also including other elements that are not explicitly listed, or further include solid by this process, method, article or equipment
Some elements.In the absence of more restrictions, the element limited by sentence " including one ", is not arranged
Except there is also other identical factors in the process, method, article or apparatus that includes the element.
Finally, it should be noted that the foregoing is merely presently preferred embodiments of the present invention, it is merely to illustrate skill of the invention
Art scheme, is not intended to limit the scope of the present invention.Any modification for being made all within the spirits and principles of the present invention,
Equivalent replacement, improvement etc., are included within the scope of protection of the present invention.
Claims (10)
1. a kind of access authentication system of engineering menu characterized by comprising mobile terminal and set-top box；
The mobile terminal, for determining in the information prestored, if exist when getting operation maintenance personnel input identity information
Target identity information corresponding with the identity information, if so, determining the first present system time of equipment, and according to institute
The first present system time and preset Encryption Algorithm are stated, determines the corresponding password to be verified of the acquisition password request, and open up
Show the password to be verified；
The set-top box, the password to be verified for being shown in the mobile terminal for getting the operation maintenance personnel input
When, it determines the second present system time of equipment, according to second present system time and the Encryption Algorithm, determines default
Engineering menu access password；Determine whether the password to be verified is corresponding with the access password, if so, showing institute
Engineering menu is stated, otherwise, output haves no right to access engineering menu.
2. the access authentication system of engineering menu according to claim 1, which is characterized in that
The mobile terminal is further used for storing at least one preset time point and at least one preset time period, wherein institute
It is corresponding with a preset time period to state preset time point；From at least one described preset time period, described is determined
The first preset time period where one present system time；From at least one described preset time point, determine that described first is pre-
If period corresponding first preset time point；According to the first preset time point and preset Encryption Algorithm, determine described in
Obtain the corresponding password to be verified of password request.
3. the access authentication system of engineering menu according to claim 2, which is characterized in that
The mobile terminal obtains the acquisition for encrypting using preset Encryption Algorithm to the first preset time point
The corresponding password to be verified of password request.
4. the access authentication system of engineering menu according to claim 3, which is characterized in that
The set-top box is further used for storing at least one described preset time point and at least one described preset time period；
From at least one described preset time period, the second preset time period where second present system time is determined；From institute
It states at least one preset time point, determines the corresponding second preset time point of second preset time period；Added using described
Close algorithm encrypts the second preset time point, determines the access password of preset engineering menu；It determines described to be verified close
Whether code is identical as the access password, if so, showing the engineering menu, otherwise, output haves no right to access engineering menu.
5. according to claim 1 to the access authentication system of any engineering menu in 4, which is characterized in that
The identity information, comprising: name, identification card number, ID mark, preset secret password and the biology of the operation maintenance personnel
It is any one or more in feature.
6. a kind of access authentication method of engineering menu characterized by comprising
It is determined in the information prestored, if exist by mobile terminal when getting operation maintenance personnel input acquisition password request
Target identity information corresponding with the identity information；
By mobile terminal, determining that there are the first present system times for when target identity information, determining equipment；
By mobile terminal, according to first present system time and preset Encryption Algorithm, determine that the acquisition password is asked
Corresponding password to be verified is sought, and shows the password to be verified；
The second of equipment is determined when getting the password to be verified of the operation maintenance personnel input by the set-top box
Present system time；
Preset engineering menu is determined according to second present system time and the Encryption Algorithm by the set-top box
Access password；
By the set-top box, determine whether the password to be verified is corresponding with the access password, if so, described in showing
Engineering menu, otherwise, output have no right to access engineering menu.
7. the access authentication method of engineering menu according to claim 6, which is characterized in that
Before the first present system time of the determining equipment, further comprise:
Store at least one preset time point and at least one preset time period, wherein described in the preset time point and one
Preset time period is corresponding；
After the first present system time of the determining equipment, described according to first present system time and default
Encryption Algorithm further comprise before determining the corresponding password to be verified of the acquisition password request:
From at least one described preset time period, the first preset time period where first present system time is determined；
From at least one described preset time point, the corresponding first preset time point of first preset time period is determined；
Then,
It is described according to first present system time and preset Encryption Algorithm, determine the acquisition password request it is corresponding to
Verify password, comprising:
According to the first preset time point and preset Encryption Algorithm, determine that the acquisition password request is corresponding to be verified close
Code.
8. the access authentication method of engineering menu according to claim 7, which is characterized in that
It is described according to the first preset time point and preset Encryption Algorithm, determine that the acquisition password request is corresponding to be tested
Demonstrate,prove password, comprising:
The first preset time point is encrypted using preset Encryption Algorithm, it is corresponding to be tested to obtain the acquisition password request
Demonstrate,prove password.
9. the access authentication method of engineering menu according to claim 8, which is characterized in that
Described according to second present system time and the Encryption Algorithm, the access password of preset engineering menu is determined
Before, further comprise:
Store at least one described preset time point and at least one described preset time period；
After the second present system time of the determining equipment, described according to second present system time and described
Encryption Algorithm before the access password for determining preset engineering menu, further comprises:
From at least one described preset time period, the second preset time period where second present system time is determined；
From at least one described preset time point, the corresponding second preset time point of second preset time period is determined；
Then,
It is described that the access password of preset engineering menu is determined according to second present system time and the Encryption Algorithm,
Include:
The second preset time point is encrypted using the Encryption Algorithm, determines the access password of preset engineering menu；
Whether the determination password to be verified is corresponding with the access password, if so, show the engineering menu, it is no
Then, output haves no right to access engineering menu, comprising:
Whether identical as the access password determine the password to be verified, if so, show the engineering menu, it is otherwise, defeated
Have no right to access engineering menu out.
10. according to the access authentication method of the engineering menu any in claim 6 to 9, which is characterized in that
The identity information, comprising: name, identification card number, ID mark, preset secret password and the biology of the operation maintenance personnel
It is any one or more in feature.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811612021.3A CN109698978B (en) | 2018-12-27 | 2018-12-27 | Access authentication system and method for engineering menu |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811612021.3A CN109698978B (en) | 2018-12-27 | 2018-12-27 | Access authentication system and method for engineering menu |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN109698978A true CN109698978A (en) | 2019-04-30 |
| CN109698978B CN109698978B (en) | 2021-04-06 |
Family
ID=66232195
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201811612021.3A Active CN109698978B (en) | 2018-12-27 | 2018-12-27 | Access authentication system and method for engineering menu |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN109698978B (en) |
Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101330379A (en) * | 2007-06-22 | 2008-12-24 | 华为技术有限公司 | Method and apparatus for down distributing cryptographic key |
| CN101616003A (en) * | 2008-06-25 | 2009-12-30 | 鸿富锦精密工业（深圳）有限公司 | Cipher protection system and method |
| CN104426659A (en) * | 2013-09-02 | 2015-03-18 | 中国移动通信集团公司 | Dynamic password generating method, authentication method, authentication system and corresponding equipment |
| CN105451038A (en) * | 2015-11-16 | 2016-03-30 | 深圳市创维软件有限公司 | Code generation method, code authentication method, related device and system |
| CN105719131A (en) * | 2016-01-27 | 2016-06-29 | 努比亚技术有限公司 | Server, client and paying-for-another method of e-payment |
| CN107154847A (en) * | 2016-03-06 | 2017-09-12 | 北京火河科技有限公司 | Towards the method for generating cipher code, verification method and its smart machine of offline environment |
| CN107426628A (en) * | 2017-07-11 | 2017-12-01 | 国创科视科技股份有限公司 | A kind of video data protection system and processing method |
| US9967513B2 (en) * | 2009-03-13 | 2018-05-08 | Cox Communications, Inc. | Password control for multi-room digital video recorder |
| CN108289074A (en) * | 2017-01-09 | 2018-07-17 | 腾讯科技（深圳）有限公司 | User account login method and device |
-
2018
- 2018-12-27 CN CN201811612021.3A patent/CN109698978B/en active Active
Patent Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101330379A (en) * | 2007-06-22 | 2008-12-24 | 华为技术有限公司 | Method and apparatus for down distributing cryptographic key |
| CN101616003A (en) * | 2008-06-25 | 2009-12-30 | 鸿富锦精密工业（深圳）有限公司 | Cipher protection system and method |
| US9967513B2 (en) * | 2009-03-13 | 2018-05-08 | Cox Communications, Inc. | Password control for multi-room digital video recorder |
| CN104426659A (en) * | 2013-09-02 | 2015-03-18 | 中国移动通信集团公司 | Dynamic password generating method, authentication method, authentication system and corresponding equipment |
| CN105451038A (en) * | 2015-11-16 | 2016-03-30 | 深圳市创维软件有限公司 | Code generation method, code authentication method, related device and system |
| CN105719131A (en) * | 2016-01-27 | 2016-06-29 | 努比亚技术有限公司 | Server, client and paying-for-another method of e-payment |
| CN107154847A (en) * | 2016-03-06 | 2017-09-12 | 北京火河科技有限公司 | Towards the method for generating cipher code, verification method and its smart machine of offline environment |
| CN108289074A (en) * | 2017-01-09 | 2018-07-17 | 腾讯科技（深圳）有限公司 | User account login method and device |
| CN107426628A (en) * | 2017-07-11 | 2017-12-01 | 国创科视科技股份有限公司 | A kind of video data protection system and processing method |
Non-Patent Citations (1)
| Title |
|---|
| 罗清彩: "基于电子签章技术的电子合同平台设计与实现", 《中国优秀硕士学位论文全文数据库 信息科技辑》 * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN109698978B (en) | 2021-04-06 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109767534B (en) | Access control access method, system, management terminal and access control terminal based on block chain | |
| EP3120282B1 (en) | User authentication | |
| KR101284481B1 (en) | Authentication method and device using OTP including biometric data | |
| CN103249045B (en) | A kind of methods, devices and systems of identification | |
| CN102449631B (en) | For performing the system and method for bookkeeping | |
| US20060036547A1 (en) | Authentication system, card and authentication method | |
| CN110430055A (en) | Offline cryptogram generation method, offline cryptogram verification method and door lock management server | |
| CN106603461A (en) | Business authentication method, apparatus and system | |
| EP2894891B1 (en) | Mobile token | |
| CN106652109A (en) | Intelligent lock control method, device and lock management server | |
| CN207409010U (en) | The newer temporary password access control system of encryption parameter dynamic | |
| CN108711209A (en) | dynamic password generation and verification method and system | |
| CN103377332A (en) | Application program accessing method and device | |
| CN107004077A (en) | Method and system for providing safe and independently operable biological characteristic authentication | |
| CN105099690A (en) | OTP and user behavior-based certification and authorization method in mobile cloud computing environment | |
| CN104281794A (en) | Password storing and verifying method and password storing and verifying device | |
| CN102307193A (en) | Key updating and synchronizing method, system and device for dynamic token | |
| CN108848064A (en) | authorization management method and system | |
| CN108932421A (en) | A kind of identity identifying method and device | |
| CN107294722A (en) | A kind of terminal identity authentication method, apparatus and system | |
| CN108369614A (en) | User authen method and system for carrying out the process | |
| KR20070075715A (en) | System for certify one-time password and method for generating one-time password | |
| CN109409041A (en) | A kind of server-side safety certifying method and system based on the application of more certificates | |
| JP2008176383A (en) | Method for creating one-time password, method for authenticating one-time password, one-time password creation apparatus, ic card with function to create one-time password, one-time password authentication apparatus, ic card program, and computer program | |
| KR101949934B1 (en) | Apparatus and Method for Monitering Equipment Using Augmented Reality Image |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| TA01 | Transfer of patent application right |
Effective date of registration: 20210316 Address after: 250100 West District, North First Floor, S06 Building, 1036 Langchao Road, Jinan High-tech Zone, Shandong Province Applicant after: SHANDONG YUNMAN INTELLIGENT TECHNOLOGY Co.,Ltd. Address before: 250100 First Floor of R&D Building 2877 Kehang Road, Sun Village Town, Jinan High-tech Zone, Shandong Province Applicant before: SHANDONG INSPUR BUSINESS SYSTEM Co.,Ltd. |
|
| TA01 | Transfer of patent application right | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20230412 Address after: West Area, North 1st Floor, S06 Building, 1036 Langchao Road, Jinan Area, China (Shandong) Pilot Free Trade Zone, Jinan City, Shandong Province, 250000 Patentee after: Shandong Langchao Ultra HD Intelligent Technology Co.,Ltd. Address before: 250100 West District, North First Floor, S06 Building, 1036 Langchao Road, Jinan High-tech Zone, Shandong Province Patentee before: SHANDONG YUNMAN INTELLIGENT TECHNOLOGY Co.,Ltd. |
|
| TR01 | Transfer of patent right |