CN116033540A

CN116033540A - Terminal equipment registration processing method, communication system and related equipment

Info

Publication number: CN116033540A
Application number: CN202111241178.1A
Authority: CN
Inventors: 王峰生; 何申; 粟栗; 杜海涛; 田野; 孙玲玲
Original assignee: China Mobile Communications Group Co Ltd; China Mobile Communications Ltd Research Institute
Current assignee: China Mobile Communications Group Co Ltd; China Mobile Communications Ltd Research Institute
Priority date: 2021-10-25
Filing date: 2021-10-25
Publication date: 2023-04-28

Abstract

The invention discloses a terminal equipment registration processing method, a communication system and related equipment, relates to the technical field of network information security, and aims to solve the problems of poor flexibility of a network access scheme of terminal equipment and complex network access operation. The method is applied to the verification device, and comprises the following steps: receiving a storage request sent by an OM server based on a registration request of first terminal equipment, wherein the storage request carries first radio frequency fingerprint information of the first terminal equipment; and responding to the storage request, and storing the first radio frequency fingerprint information into a pre-stored radio frequency fingerprint library. The embodiment of the invention can enable the user to register the terminal equipment autonomously without pre-storing the radio frequency fingerprint information of the equipment on the network side.

Description

Terminal equipment registration processing method, communication system and related equipment

Technical Field

The present invention relates to the field of network information security technologies, and in particular, to a terminal device registration processing method, a communication system, and related devices.

Background

With the vigorous development of the service of the internet of things, the intelligent acceptance degree of the terminal equipment of the internet of things is gradually popularized by the masses, and various types of terminal equipment are more and more. Currently, most terminal devices can be used in a networking manner. In order to make the terminal equipment normally use the network function, the radio frequency fingerprint information of the terminal equipment is generally required to be input to the network side before the terminal equipment is used.

At present, the information of the terminal equipment is generally input into an operation and maintenance (Operate and Maintain, OM) server in a unified mode or in batches manually, so that the networking of the terminal equipment is realized by pre-storing the information of the terminal equipment on a network side. The user therefore often needs to carry the relevant equipment to the operator for activation of the network functions after purchasing the terminal equipment.

The number of terminal devices is gradually increased, the forms of the terminal devices are also more and more diversified, the network access scheme of the terminal devices in the prior art is poor in flexibility, and the problem of complex network access operation is gradually highlighted.

Disclosure of Invention

The embodiment of the invention provides a terminal equipment registration processing method, a communication system and related equipment, which are used for solving the problems of poor flexibility of a terminal equipment network access scheme and complex network access operation in the prior art.

In a first aspect, an embodiment of the present invention provides a terminal device registration processing method, which is applied to an authentication device, where the method includes:

receiving a storage request sent by an OM server based on a registration request of first terminal equipment, wherein the storage request carries first radio frequency fingerprint information of the first terminal equipment;

And responding to the storage request, and storing the first radio frequency fingerprint information into a pre-stored radio frequency fingerprint library.

Optionally, after the storing the first rf fingerprint information in the pre-stored rf fingerprint library in response to the storing request, the method further includes:

and sending a storage result to the OM server, wherein the storage result is used for determining a registration result corresponding to the registration request.

Optionally, before the storing the first rf fingerprint information in the pre-stored rf fingerprint library in response to the storing request, the method further includes:

receiving second biological characteristic information sent by second terminal equipment;

comparing the second biometric information with the reserved biometric information;

and under the condition that the second biological characteristic information is matched with the reserved biological characteristic information, sending a pre-stored request to the OM server, wherein the pre-stored request carries the second biological characteristic information.

receiving an access request sent by third terminal equipment; the access request carries at least one of third biometric information and second radio frequency fingerprint information of the third terminal device;

Verifying at least one of the third biometric information and the second radio frequency fingerprint information;

and updating the key with the third terminal equipment in the case that the verification is passed.

In a second aspect, an embodiment of the present invention further provides a terminal device registration processing method, which is applied to an OM server, where the method includes:

receiving a registration request sent by first terminal equipment, wherein the registration request carries first biological characteristic information and first radio frequency fingerprint information of the first terminal equipment;

comparing the first biological characteristic information with pre-stored second biological characteristic information;

and sending a storage request to verification equipment under the condition that the first biological characteristic information is matched with the second biological characteristic information, wherein the storage request carries the first radio frequency fingerprint information.

Optionally, before comparing the first biometric information with the pre-stored second biometric information, the method further comprises:

receiving a pre-stored request sent by the verification device, wherein the pre-stored request carries the second biological characteristic information;

and storing the second biometric information in response to the pre-stored request.

Optionally, after comparing the first biometric information with the pre-stored second biometric information, the method further comprises:

and sending a registration result notification to the first terminal device in the case that the first biometric information is matched with the second biometric information.

Optionally, before sending a registration result notification to the first terminal device, in the case that the first biometric information matches the second biometric information, the method further includes:

receiving a storage result sent by the verification device;

and determining a registration result based on the stored result.

In a third aspect, an embodiment of the present invention further provides a terminal device registration processing method, applied to a terminal device, where the terminal device is a first terminal device, and the method includes:

sending a registration request to an OM server, wherein the registration request carries first biological characteristic information and first radio frequency fingerprint information of the first terminal equipment;

and receiving a registration result notification sent by the OM server.

In a fourth aspect, an embodiment of the present invention further provides a communication system, including an authentication device and an OM server, where;

The verification device is used for receiving a storage request sent by the OM server based on a registration request of the first terminal device, wherein the storage request carries first radio frequency fingerprint information of the first terminal device; responding to the storage request, and storing the first radio frequency fingerprint information into a pre-stored radio frequency fingerprint library;

the OM server is configured to receive a registration request sent by a first terminal device, where the registration request carries first biometric information and first radio frequency fingerprint information of the first terminal device; comparing the first biological characteristic information with pre-stored second biological characteristic information; and sending a storage request to verification equipment under the condition that the first biological characteristic information is matched with the second biological characteristic information, wherein the storage request carries the first radio frequency fingerprint information.

In a fifth aspect, an embodiment of the present invention further provides an authentication apparatus, including:

the first receiving module is used for receiving a storage request sent by the OM server based on a registration request of the first terminal equipment, wherein the storage request carries first radio frequency fingerprint information of the first terminal equipment;

and the first storage module is used for responding to the storage request and storing the first radio frequency fingerprint information into a pre-stored radio frequency fingerprint library.

In a sixth aspect, an embodiment of the present invention further provides an OM server, including:

the second receiving module is used for receiving a registration request sent by first terminal equipment, wherein the registration request carries first biological characteristic information and first radio frequency fingerprint information of the first terminal equipment;

the first comparison module is used for comparing the first biological characteristic information with the pre-stored second biological characteristic information;

and the first sending module is used for sending a storage request to the verification equipment under the condition that the first biological characteristic information is matched with the second biological characteristic information, wherein the storage request carries the first radio frequency fingerprint information.

In a seventh aspect, an embodiment of the present invention further provides a terminal device, where the terminal device is a first terminal device, and the terminal device includes:

the second sending module is used for sending a registration request to the OM server, wherein the registration request carries first biological characteristic information and first radio frequency fingerprint information of the first terminal equipment;

and the third receiving module is used for receiving the registration result notification sent by the OM server.

In an eighth aspect, an embodiment of the present invention further provides an authentication apparatus, including: a transceiver, a memory, a processor, and a program stored on the memory and executable on the processor; the processor is configured to read a program in a memory to implement the steps in the terminal device registration processing method according to the first aspect.

In a ninth aspect, an embodiment of the present invention further provides an OM server, including: a transceiver, a memory, a processor, and a program stored on the memory and executable on the processor; the processor is configured to read a program in a memory to implement the steps in the terminal device registration processing method according to the second aspect.

In a tenth aspect, an embodiment of the present invention further provides a terminal device, including: a transceiver, a memory, a processor, and a program stored on the memory and executable on the processor; the processor is configured to read a program in a memory to implement the steps in the terminal device registration processing method according to the third aspect.

In the embodiment of the invention, the OM server receives a registration request sent by a first terminal device, compares the first biometric information with pre-stored second biometric information, and sends a storage request to a verification device when the first biometric information is matched with the second biometric information. And the verification equipment responds to the storage request and stores the first radio frequency fingerprint information into a pre-stored radio frequency fingerprint library. On the one hand, the biological characteristic information is used for verifying the identity of the user, so that the convenience, accuracy and safety of verifying the identity of the user are improved. On the other hand, after the user permission passes, the radio frequency fingerprint information of the terminal equipment can be stored on the verification equipment, the radio frequency fingerprint information of the equipment is not required to be pre-stored on a network side, and the security, convenience and autonomy of the registration processing of the terminal equipment are improved.

Drawings

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings that are needed in the description of the embodiments of the present invention will be briefly described below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and other drawings may be obtained according to these drawings without inventive effort for a person skilled in the art.

Fig. 1 is one of flowcharts of a terminal device registration processing method provided in an embodiment of the present invention;

fig. 2 is a second flowchart of a terminal device registration processing method according to an embodiment of the present invention;

fig. 3 is a third flowchart of a terminal device registration processing method according to an embodiment of the present invention;

fig. 4 is a flowchart of a terminal device registration processing method provided in an embodiment of the present invention;

FIG. 5 is one of the block diagrams of the authentication device provided by the embodiment of the present invention;

FIG. 6 is a block diagram of an OM server provided by an embodiment of the present invention;

fig. 7 is one of the block diagrams of the terminal device provided in the embodiment of the present invention;

FIG. 8 is a second block diagram of the authentication apparatus provided by the embodiment of the present invention;

FIG. 9 is a second block diagram of an OM server according to an embodiment of the present invention;

Fig. 10 is a second block diagram of a terminal device according to an embodiment of the present invention.

Detailed Description

The following description of the embodiments of the present invention will be made clearly and fully with reference to the accompanying drawings, in which it is evident that the embodiments described are some, but not all embodiments of the invention. All other embodiments, which are derived by a person skilled in the art from the embodiments according to the invention without creative efforts, fall within the protection scope of the invention.

Unless defined otherwise, technical or scientific terms used herein should be given the ordinary meaning as understood by one of ordinary skill in the art to which this invention belongs. The terms "first," "second," and the like, as used herein, do not denote any order, quantity, or importance, but rather are used to distinguish one element from another. "upper", "lower", "left", "right", etc. are used merely to indicate a relative positional relationship, which changes accordingly when the absolute position of the object to be described changes.

As shown in fig. 1, an embodiment of the present invention provides a terminal device registration processing method, which is applied to an authentication device, and the method includes:

Step 101, a storage request sent by an OM server based on a registration request of a first terminal device is received, wherein the storage request carries first radio frequency fingerprint information of the first terminal device.

It should be understood that, in a specific implementation, the information may be forwarded through the access device when data interaction between the terminal device and the authentication device is performed. Similarly, when data interaction is performed between the terminal device and the OM server, information forwarding can be performed through the access device. The terminal equipment comprises a first terminal equipment, a second terminal equipment and a third terminal equipment. For ease of understanding, the process of data forwarding by the access device is omitted in the following description. For example, in this embodiment, the OM server is the storage request sent based on the registration request of the first terminal device. In the actual use process, the first terminal device sends the registration request to the access device, and the access device forwards the registration request to the OM server.

It should be understood that the first terminal device, the second terminal device, and the third terminal device may be intelligent internet of things devices with biometric identification capabilities. The first terminal device, the second terminal device and the third terminal device may be the same or different from each other. For example, in some embodiments, the first terminal device, the second terminal device, and the third terminal device may be a smart phone, a smart car, a smart wearable device, or a smart home device, respectively.

The specific application scenario of the method provided by the embodiment of the invention is not limited herein, for example, in some embodiments, the first terminal device is an intelligent automobile with biological feature recognition capability, and the user can autonomously register and activate the mobile network connection capability of the intelligent automobile through the terminal device registration processing method provided by the embodiment of the invention, without the need of a vehicle manufacturer to contact with an operator in advance, and provide radio frequency fingerprint information in the intelligent automobile to the operator, and write the radio frequency fingerprint information into the network of the operator. In other embodiments, the first terminal device is a smart watch with biometric identification capability, and the user may autonomously register and activate the mobile network connection capability of the smart watch through the terminal device registration processing method provided by the embodiment of the present invention, without writing the disenergy watch radio frequency fingerprint information into the network in advance.

Firstly, the first terminal equipment sends a registration request to the OM server, wherein the registration request carries first biological characteristic information and first radio frequency fingerprint information of the first terminal equipment.

It should be understood that the first biometric information is first biometric information of the user acquired by the first terminal device. For example, in some embodiments, the first biometric information may be one or more of face information, iris information, fingerprint information, voice information, DNA information.

It should be appreciated that the first biometric information may be used to identify the identity of the user. Biometric information is typically universal, unique, measurable, and stable. Similarly, the radio frequency fingerprint information has universality, uniqueness, short-time invariance and robustness, so that the radio frequency fingerprint information can be used for identifying the identity of the terminal equipment.

And then, the OM server receives a registration request sent by the first terminal equipment, extracts the first biological characteristic information and the first radio frequency fingerprint information from the registration request, and compares the first biological characteristic information with pre-stored second biological characteristic information.

It should be appreciated that the second biometric information is typically a plurality in number. The second biometric information is pre-stored in the OM server, which can be understood that after the user opens the authority of the autonomous registration terminal device, the biometric information of the user is stored in the OM server, and the user corresponding to the second biometric information has the authority of the autonomous registration terminal device.

It should be understood that the specific manner in which the user opens the authority to autonomously register the terminal device is not limited herein. For example, in some embodiments, a user may autonomously apply for network grants or cancels its own autonomous registration terminal authority in advance through supplementary service class operations, or by the network by uniformly authorizing or canceling the autonomous registration terminal authority for a particular user.

It should be appreciated that the specific manner in which the second biometric information is pre-stored in the OM server is not limited herein. For example, in some embodiments, the second biometric information is sent to the OM server in advance by the verification device. In other embodiments, the second biometric information is entered by extraction of supplementary service class operations.

Optionally, in some embodiments, the verification device further performs the following steps before storing the first rf fingerprint information in a pre-stored rf fingerprint library in response to the storage request:

The OM server receives a pre-stored request sent by the verification device before comparing the second biometric information with pre-stored second biometric information, and stores the second biometric information in response to the pre-stored request.

It will be appreciated that in some embodiments the second terminal device may trigger an access stratum wireless channel key agreement request before the second terminal device sends a storage request to the authentication device. The second terminal equipment and the access equipment generate a negotiation key after the steps of channel measurement, channel estimation, quantization coding, information reconciliation, privacy amplification and the like, and the negotiation key performs encryption protection on the information based on the subsequent wireless signal interaction. In this embodiment, the key negotiation step is located before the data transmission, and may protect the subsequent data transmission. The second biological characteristic information is transmitted in the wireless safety pipeline after negotiation based on the wireless channel key technology, so that the safety of information transmission is improved.

It should be understood that the encryption made by the upper layer in the original system design can be sunk to the physical layer to realize the data transmission by the encryption pipeline established by the generated physical layer key after the measurement, estimation, quantization, harmony and privacy amplification of the wireless channel characteristics; meanwhile, due to the time-varying characteristic of the wireless channel, the updating frequency of the encryption channel key can be improved, the safety of transmitted data can be ensured, and the difficulty of offline cracking through wireless air interface capturing is increased.

It should be understood that in this embodiment, the second terminal device may be the same as or different from the first terminal device. For example, in some embodiments, the user verifies the biometric information corresponding to the user through the smart phone, and opens the authority of the user to autonomously register the terminal device. At this time, in one case, the user may continue to use the smart phone, and the biometric information of the user and the radio frequency fingerprint information of the smart phone are sent to the OM server through the smart phone, so as to autonomously complete registration of the smart phone. In another case, the user may use the intelligent vehicle, and the biometric information of the user and the radio frequency fingerprint information of the intelligent vehicle are transmitted to the OM server through the intelligent vehicle, so as to autonomously complete the registration of the intelligent vehicle.

It should be appreciated that in some embodiments, the reserved biometric information may be understood as biometric information reserved within the authentication device by the user during the process of opening an account. In this embodiment, in the case where the user completes the opening of the account, the default user has opened the authority of the autonomous registration terminal device at the time of opening the account.

It should be understood that in some embodiments, the user needs to further confirm whether to open the authority of the autonomous registration terminal apparatus in the case of completing the opening of the account, and save the biometric information of the user as reserved biometric information in the case of completing the opening of the account and opening the right of the autonomous registration terminal apparatus.

It should be appreciated that comparing the second biometric information with the reserved biometric information may be understood as determining whether the second biometric information matches any of the reserved biometric information. And under the condition that the second biological characteristic information is matched with the reserved biological characteristic information, the user corresponding to the second biological characteristic information can be considered to have opened the authority of the autonomous registration terminal equipment. And under the condition that the second biological characteristic information is not matched with the reserved biological characteristic information, the verification device informs the second terminal device that the user authentication fails, and the second terminal device reminds the user authentication failure.

In this embodiment, the verification device verifies whether the authority of the corresponding user to the autonomous registration terminal device is opened by using the biometric information, and sends the second biometric information corresponding to the user to the OM server when confirming that the authority of the user to the autonomous registration terminal device is opened. Through the process, the probability of registering the terminal equipment privately by the user without verification is reduced, and the reliability and the safety of the terminal equipment registration processing are improved.

It should be appreciated that comparing the first biometric information with pre-stored second biometric information may be understood as determining whether the first biometric information matches any of the second biometric information.

And under the condition that the first biological characteristic information is matched with the second biological characteristic information, the OM server sends a storage request to verification equipment, wherein the storage request carries the first radio frequency fingerprint information.

Optionally, in some embodiments, after comparing the first biometric information with the pre-stored second biometric information, the OM server further sends a registration result notification to the first terminal device if the first biometric information matches the second biometric information.

And then, the first terminal equipment receives a registration result notification sent by the OM server. In some embodiments, the first terminal device may display the registration result to the user. And under the condition that the first biological characteristic information is matched with the second biological characteristic information, the OM server informs the first terminal equipment that the registration is successful, and the first terminal equipment reminds the user that the registration is successful. And under the condition that the first biological characteristic information is not matched with the second biological characteristic information, the OM server informs the first terminal equipment of registration failure, and the first terminal equipment reminds a user of registration failure.

In the embodiment of the present invention, the OM server sends a registration result notification to the first terminal device when the first biometric information matches the second biometric information. The first terminal equipment can display the registration result to the user, so that the user can be reminded of timely processing under the condition of registration failure, and the reliability of the terminal equipment registration processing method is improved.

And step 102, in response to the storage request, storing the first radio frequency fingerprint information into a pre-stored radio frequency fingerprint library.

After receiving the storage request, the verification device responds to the storage request and stores the first radio frequency fingerprint information into a pre-stored radio frequency fingerprint library.

It should be appreciated that in some embodiments, in the event that the first biometric information matches the second biometric information, the OM server will send both a storage request to the authentication device and a registration result notification to the first terminal device. As can be seen from this, in the tenth embodiment, registration is considered to be successful in the case where the first biometric information matches the second biometric information.

It should be appreciated that in some embodiments, the first terminal device and the second terminal device are the same device. After user authentication is performed by using the first terminal equipment, the user directly registers the first terminal equipment. Therefore, in this embodiment, since the user identity has already been verified, the second biometric information does not need to be verified in the process of registering the first terminal device.

In some embodiments, in the event that the first biometric information matches the second biometric information, it may still be desirable to determine whether enrollment was successful based on the results stored by the verification device.

Optionally, in some embodiments, after the verifying device stores the first rf fingerprint information in a pre-stored rf fingerprint library in response to the storage request, the verifying device further performs the following steps:

And the OM server receives the storage result sent by the verification device and determines a registration result based on the storage result.

It should be appreciated that in the case where the storage result is successful, the OM server may determine that the registration result is successful based on the storage result. In the case that the storage result is a storage failure, the OM server may determine that the registration result is a registration failure based on the storage result.

In this embodiment, the verification device further sends a storage result to the OM server after storing the first rf fingerprint information in a pre-stored rf fingerprint library. The OM server determines a registration result based on the stored result. In this embodiment, the registration result is determined based on the stored result of the authentication device, thereby improving the reliability of the registration result.

Optionally, in some embodiments, the verification device further performs the following steps after storing the first rf fingerprint information in a pre-stored rf fingerprint library in response to the storage request:

It will be appreciated that the third terminal device may be the same or different from the first terminal device. The third terminal device may be the same or different from the second terminal device. In a specific implementation, the third terminal device is generally identical to the first terminal device.

It should be understood that, in a specific implementation, receiving an access request sent by a third terminal device may be understood that the third terminal device sends an access request to the access device, triggers the access device to update a related key, and the access device forwards the access request to the authentication device.

It should be understood that in a specific implementation, in the case of passing of authentication, updating the key with the third terminal device may be understood that in the case of passing of authentication, the authentication device transmits an authentication passing notification to the access device, and the access device responds to the authentication passing notification and updates the key with the third terminal device after passing of the steps of channel measurement, channel estimation, quantization encoding, information reconciliation, privacy amplification, and the like with the terminal side.

It should be understood that, in the case of authentication failure, the authentication device sends an access failure notification to the third terminal device, which alerts the client of the access failure.

It will be appreciated that the third terminal device sends an access request to the authentication device. The access request carries at least one of third biometric information and second radio frequency fingerprint information of the third terminal device. It should be understood that the third biometric information is biometric information of the user extracted by the third terminal device.

It should be appreciated that verifying at least one of the third biometric information and the second radio frequency fingerprint information may be understood that in the first case the access request carries only the third biometric information, in which case the third biometric information may be verified. Wherein verifying the third biometric information may be understood as comparing the third biometric information with biometric information reserved in the verification device; and verifying that the third biometric information passes if the third biometric information matches the reserved biometric information.

In the second case, the access request only carries the second rf fingerprint information, and the second rf fingerprint information may be verified at this time. Wherein, verifying the second rf fingerprint information may be understood as comparing the second rf fingerprint information with a pre-stored rf fingerprint library; and under the condition that the second radio frequency fingerprint information is matched with the pre-stored radio frequency fingerprint library, verifying that the second radio frequency fingerprint information passes.

In a third case, the access request carries the third biometric information and second radio frequency fingerprint information. The user may choose to verify that either the third biometric information or the second radio frequency fingerprint information passes, i.e. update the key with the third terminal device. The user may also choose to update the key with the third terminal device in case of verifying that both the third biometric information and the second radio frequency fingerprint information pass. And in the case that the third biological characteristic information and the second radio frequency fingerprint information are verified to be not passed, the verification device sends a notification of access failure to the third terminal device.

In this embodiment, the third terminal device applies for an access network to the authentication device. In this embodiment, the user may choose to verify the radio frequency fingerprint information of the third terminal device and/or to verify the biometric information of the user. By the arrangement, under the condition that the user biological characteristic information is difficult to acquire, the network can still be accessed through the radio frequency fingerprint information of the terminal equipment, and the flexibility of accessing the terminal equipment into the network is improved.

In particular, in verifying the identity of a user, the prior art requires a terminal and a network side to share a secret key, respectively. The use of the biometric feature instead of the pre-master key mechanism can reduce the processing complexity of the related network elements required by the prior system for key layering, distribution and derivation, and does not need the encryption algorithm function which each network element needs to realize.

The embodiment of the invention also provides a terminal equipment registration processing method which is applied to the OM server and comprises the following steps:

step 201, receiving a registration request sent by a first terminal device, wherein the registration request carries first biological characteristic information and first radio frequency fingerprint information of the first terminal device;

step 202, comparing the first biological characteristic information with pre-stored second biological characteristic information;

step 203, sending a storage request to an authentication device, where the first biometric information matches the second biometric information, where the storage request carries the first radio frequency fingerprint information.

receiving a storage result sent by the verification device;

and determining a registration result based on the stored result.

It should be understood that, as an implementation manner of the OM server side corresponding to the embodiment shown in fig. 1, a specific implementation manner of the embodiment may refer to a related description in the embodiment shown in fig. 1, and in order to avoid repetition, a description is omitted here.

The embodiment of the invention also provides a terminal equipment registration processing method, which is applied to terminal equipment, wherein the terminal equipment is first terminal equipment, and the method comprises the following steps:

Step 301, a registration request is sent to an OM server, wherein the registration request carries first biometric information and first radio frequency fingerprint information of the first terminal device;

step 302, receiving a registration result notification sent by the OM server.

It should be understood that, as an implementation manner of the terminal device side corresponding to the embodiment shown in fig. 1, a specific implementation manner of the embodiment may refer to a related description in the embodiment shown in fig. 1, and in order to avoid repetition, a description is omitted here.

As shown in fig. 4, as a specific example, an embodiment of the present invention provides a terminal device registration processing method, which specifically includes:

it should be understood that, in the embodiment of the present invention, the first terminal device, the second terminal device, and the third terminal device are the same terminal device. In the following description and in fig. 4, the first terminal device, the second terminal device, and the third terminal device are collectively referred to as terminal devices. The terminal equipment has the biological characteristic recognition capability, namely, the terminal equipment can extract biological characteristic information of a user.

First, a user performs user authentication through the terminal device. The terminal device triggers an access layer wireless channel key negotiation request. The terminal equipment and the access equipment generate a negotiation key after the steps of channel measurement, channel estimation, quantization coding, information reconciliation, privacy amplification and the like, and the negotiation key performs encryption protection on the information based on wireless signal interaction.

And then, the terminal equipment collects the biological characteristic information of the user and sends second biological characteristic information to the verification equipment through the access equipment. And the verification equipment compares the second biological characteristic information with the reserved characteristic information after receiving the second biological characteristic information. Each user retains biological characteristic information when opening an account, and the biological characteristic information of the user is kept as the reserved characteristic information under the condition that the user opens an autonomous registration terminal device. And under the condition that the second biological characteristic information is matched with the reserved characteristic information, verifying the identity of the user is successful. At this time, the verification device sends a pre-stored request carrying the second biometric information to the OM server. The OM server stores the second biometric information. In addition, the authentication device sends an authentication success notification to the terminal device through the access device, the access device sends an authentication success notification to the terminal device, and the terminal device notifies the user that authentication is successful.

And then, under the condition that the user authentication is successful, the user uses the terminal equipment to perform autonomous registration on the terminal equipment. And the terminal equipment sends a registration request to the OM server through the access equipment, wherein the registration request carries first radio frequency fingerprint information of the terminal equipment. It should be appreciated that, since user authentication has been performed and authentication is successful, in this embodiment, the user can perform autonomous registration directly using the terminal device. And after receiving the registration request, the OM server sends a storage request to the verification device, wherein the storage request carries the first radio frequency fingerprint information. After receiving the storage request, the verification device stores the first radio frequency fingerprint information into a pre-stored radio frequency fingerprint library, and sends a storage success notification to the OM server. After receiving the storage success notification, the OM server determines that the registration is successful based on the storage success notification, and sends a registration driver notification to the terminal equipment through the access equipment, wherein the terminal equipment notifies the user that the registration is successful.

And finally, the user verifies the safe access of the terminal equipment. And the terminal equipment sends an access request to the access equipment and triggers the update of the wireless channel key of the access layer. The access request carries at least one of third biometric information and second radio frequency fingerprint information of the terminal device. The access device sends the access request to the authentication device. The verification device verifies the third biometric information and/or the second radio frequency fingerprint information. And in the case that at least one of the third biometric information and the second radio frequency fingerprint information is authenticated, the authentication device transmits an authentication passing notification to the access device, and the access device updates a key with the terminal device in response to the authentication passing notification. And the terminal equipment informs the user of successful access. It should be noted that the success of the terminal device access may be understood that the user performs autonomous registration on the terminal device by using the terminal device, and the terminal device registration is successful, so that the second rf fingerprint information of the terminal device is already stored in the pre-stored rf fingerprint library.

By the method provided by the embodiment of the invention, the terminal equipment with the biological characteristic recognition capability can be independently registered by the verification of the user on the biological characteristic information through the verification equipment. Wherein the biometric information is transmitted in the wireless secure tunnel after negotiation based on the wireless channel key technique. Therefore, in the embodiment of the invention, the radio frequency fingerprint information of the terminal equipment can be safely, quickly and autonomously registered without pre-storing the radio frequency fingerprint information of the terminal equipment at the network side. In the subsequent use, any one of the radio frequency fingerprint information of the terminal equipment and the biological characteristic information of the user can be conveniently used for verification, so that the terminal equipment is accessed into a network.

The embodiment of the invention also provides a communication system, which comprises verification equipment and an OM server, wherein the verification equipment comprises a communication module and a communication module;

the verification device is used for a storage request sent by the OM server based on a registration request of the first terminal device, and the storage request carries first radio frequency fingerprint information of the first terminal device; responding to the storage request, and storing the first radio frequency fingerprint information into a pre-stored radio frequency fingerprint library;

It should be appreciated that in some embodiments, the communication system further comprises an access device. The access device is used for forwarding data when the terminal device is communicated with the verification device, and the access device is used for forwarding data when the terminal device is communicated with the OM server. The terminal equipment comprises a first terminal equipment, a second terminal equipment and a third terminal equipment.

The embodiment of the invention also provides verification equipment, referring to fig. 5, fig. 5 is a structural diagram of verification equipment 500 provided by the embodiment of the invention. Since the principle of the verification device 500 for solving the problem is similar to that of the terminal device registration processing method shown in fig. 1 in the embodiment of the present invention, the implementation of the verification device 500 may refer to the implementation of the method, and the repetition is not repeated.

As shown in fig. 5, an embodiment of the present invention provides an authentication apparatus 500, the authentication apparatus 500 including:

a first receiving module 501, configured to receive a storage request sent by an OM server based on a registration request of a first terminal device, where the storage request carries first radio frequency fingerprint information of the first terminal device;

the first storage module 502 is configured to store the first rf fingerprint information into a pre-stored rf fingerprint library in response to the storage request.

Optionally, the verification device 500 further includes:

and the third sending module is used for sending a storage result to the OM server, wherein the storage result is used for determining a registration result corresponding to the registration request.

Optionally, the verification device 500 further includes:

a fourth receiving module, configured to receive second biometric information sent by the second terminal device;

The second comparison module is used for comparing the second biological characteristic information with the reserved biological characteristic information;

and the fourth sending module is used for sending a pre-storing request to the OM server under the condition that the second biological characteristic information is matched with the reserved biological characteristic information, wherein the pre-storing request carries the second biological characteristic information.

Optionally, the verification device 500 further includes:

a fifth receiving module, configured to receive an access request sent by the third terminal device; the access request carries at least one of third biometric information and second radio frequency fingerprint information of the third terminal device;

the verification module is used for verifying at least one of the third biological characteristic information and the second radio frequency fingerprint information;

and the updating module is used for updating the key with the third terminal equipment under the condition that the verification is passed.

The verification device 500 provided in the embodiment of the present invention can implement each process implemented by the method embodiment shown in fig. 1, and can achieve the same beneficial effects, so that repetition is avoided, and no further description is provided herein.

The embodiment of the invention also provides an OM server, referring to fig. 6, fig. 6 is a structural diagram of an OM server 600 provided by the embodiment of the invention. Since the principle of the OM server 600 for solving the problem is similar to that of the terminal device registration processing method shown in fig. 2 in the embodiment of the present invention, the implementation of the OM server 600 can refer to the implementation of the method, and the repetition is not repeated.

As shown in fig. 6, an embodiment of the present invention provides an OM server 600, where the OM server 600 includes:

a second receiving module 601, configured to receive a registration request sent by a first terminal device, where the registration request carries first biometric information and first radio frequency fingerprint information of the first terminal device;

a first comparing module 602, configured to compare the first biometric information with a pre-stored second biometric information;

and the first sending module 603 is configured to send a storage request to an authentication device, where the storage request carries the first rf fingerprint information, where the first biometric information matches the second biometric information.

Optionally, the OM server 600 further includes:

a sixth receiving module, configured to receive a pre-stored request sent by the verification device, where the pre-stored request carries the second biometric information;

and the second storage module is used for responding to the pre-stored request and storing the second biological characteristic information.

Optionally, the OM server 600 further includes:

and a fifth sending module, configured to send a registration result notification to the first terminal device when the first biometric information matches the second biometric information.

Optionally, the OM server 600 further includes:

a seventh receiving module, configured to receive a storage result sent by the verification device;

and the determining module is used for determining a registration result based on the storage result.

The verification device 600 provided in the embodiment of the present invention can implement each process implemented by the method embodiment shown in fig. 2, and can achieve the same beneficial effects, so that repetition is avoided, and no further description is provided herein.

The embodiment of the invention also provides a terminal device, referring to fig. 7, and fig. 7 is a block diagram of a terminal device 700 provided by the embodiment of the invention. Since the principle of the terminal device 700 for solving the problem is similar to that of the terminal device registration processing method shown in fig. 3 in the embodiment of the present invention, the implementation of the terminal device 700 may refer to the implementation of the method, and the repetition is not repeated.

As shown in fig. 7, the embodiment of the present invention further provides a terminal device 700, where the terminal device 700 is a first terminal device, and the terminal device 700 includes:

a second sending module 701, configured to send a registration request to an OM server, where the registration request carries first biometric information and first radio frequency fingerprint information of the first terminal device;

And a third receiving module 702, configured to receive a registration result notification sent by the OM server.

The terminal device 700 provided in the embodiment of the present invention can implement each process implemented by the method embodiment shown in fig. 3, and can achieve the same beneficial effects, so that repetition is avoided, and no further description is provided herein.

The embodiment of the invention also provides verification equipment. Since the principle of solving the problem by the verification device is similar to that of the terminal device registration processing method shown in fig. 1 in the embodiment of the present invention, the implementation of the verification device may refer to the implementation of the method, and the repetition is not repeated. As shown in fig. 8, the authentication apparatus of the embodiment of the present invention includes: processor 800, for reading the program in memory 820, performs the following processes:

responding to the storage request, and storing the first radio frequency fingerprint information into a pre-stored radio frequency fingerprint library;

processor 800, for reading the program in memory 820, performs the following processes: receiving, by the transceiver 810, a storage request sent by the OM server based on a registration request of the first terminal device, where the storage request carries first radio frequency fingerprint information of the first terminal device;

a transceiver 810 for receiving and transmitting data under the control of the processor 800.

Wherein in fig. 8, a bus architecture may comprise any number of interconnected buses and bridges, and in particular, one or more processors represented by processor 800 and various circuits of memory represented by memory 820, linked together. The bus architecture may also link together various other circuits such as peripheral devices, voltage regulators, power management circuits, etc., which are well known in the art and, therefore, will not be described further herein. The bus interface provides an interface. Transceiver 810 may be a number of elements, including a transmitter and a transceiver, providing a means for communicating with various other apparatus over a transmission medium. The processor 800 is responsible for managing the bus architecture and general processing, and the memory 820 may store data used by the processor 800 in performing operations.

Optionally, the processor 800 is further configured to read the program in the memory 820, and perform the following steps:

and sending, by transceiver 810, a stored result to the OM server, where the stored result is used to determine a registration result corresponding to the registration request.

receiving, by the transceiver 810, the second biometric information transmitted by the second terminal device;

and in the case that the second biometric information matches the reserved biometric information, sending a pre-stored request to the OM server through transceiver 810, the pre-stored request carrying the second biometric information.

receiving, by the transceiver 810, an access request sent by the third terminal device; the access request carries at least one of third biometric information and second radio frequency fingerprint information of the third terminal device;

The verification device provided in the embodiment of the present invention may execute the method embodiment shown in fig. 1, and its implementation principle and technical effects are similar, and this embodiment will not be described herein.

The embodiment of the invention also provides an OM server. Because the principle of the OM server for solving the problem is similar to that of the terminal device registration processing method shown in fig. 2 in the embodiment of the present invention, the implementation of the OM server can refer to the implementation of the method, and the repetition is not repeated. As shown in fig. 9, the authentication apparatus of the embodiment of the present invention includes: processor 900, for reading the program in memory 920, performs the following procedures:

processor 900, for reading the program in memory 920, performs the following procedures:

receiving a registration request sent by a first terminal device through a transceiver 910, wherein the registration request carries first biometric information and first radio frequency fingerprint information of the first terminal device; and in case the first biometric information matches the second biometric information, sending a storage request to the authentication device via the transceiver 910, the storage request carrying the first radio frequency fingerprint information.

A transceiver 910 for receiving and transmitting data under the control of the processor 900.

Wherein in fig. 9, a bus architecture may comprise any number of interconnected buses and bridges, and in particular one or more processors represented by processor 900 and various circuits of memory represented by memory 920, linked together. The bus architecture may also link together various other circuits such as peripheral devices, voltage regulators, power management circuits, etc., which are well known in the art and, therefore, will not be described further herein. The bus interface provides an interface. The transceiver 910 may be a number of elements, including a transmitter and a transceiver, providing a means for communicating with various other apparatus over a transmission medium. The processor 900 is responsible for managing the bus architecture and general processing, and the memory 920 may store data used by the processor 900 in performing operations.

Optionally, the processor 900 is further configured to read the program in the memory 920, and perform the following steps:

receiving, by the transceiver 910, a pre-stored request sent by the verification device, the pre-stored request carrying the second biometric information;

and transmitting a registration result notification to the first terminal device through the transceiver 910 in case that the first biometric information matches the second biometric information.

receiving, by the transceiver 910, the stored result transmitted by the authentication device;

and determining a registration result based on the stored result.

The OM server provided by the embodiment of the present invention may execute the method embodiment shown in fig. 2, and its implementation principle and technical effects are similar, and this embodiment will not be described herein.

The embodiment of the invention also provides terminal equipment. Since the principle of solving the problem by the terminal device is similar to that of the terminal device registration processing method shown in fig. 3 in the embodiment of the present invention, the implementation of the terminal device may refer to the implementation of the method, and the repetition is not repeated. As shown in fig. 10, a terminal device according to an embodiment of the present invention includes:

Transmitting a registration request to an OM server through a transceiver 1010, wherein the registration request carries first biometric information and first radio frequency fingerprint information of the first terminal device;

the registration result notification sent by the OM server is received through transceiver 1010.

A transceiver 1010 for receiving and transmitting data under the control of the processor 1000.

Wherein in fig. 10, a bus architecture may comprise any number of interconnected buses and bridges, and in particular one or more processors represented by the processor 1000 and various circuits of the memory, represented by the memory 1020, are chained together. The bus architecture may also link together various other circuits such as peripheral devices, voltage regulators, power management circuits, etc., which are well known in the art and, therefore, will not be described further herein. The bus interface provides an interface. The transceiver 1010 may be a number of elements, i.e., including a transmitter and a receiver, providing a means for communicating with various other apparatus over a transmission medium. The user interface 1030 may also be an interface capable of interfacing with an internal connection requiring device for a different user device including, but not limited to, a keypad, display, speaker, microphone, joystick, etc.

The processor 1000 is responsible for managing the bus architecture and general processing, and the memory 1020 may store data used by the processor 1000 in performing operations.

The terminal device provided in the embodiment of the present invention may execute the method embodiment shown in fig. 3, and its implementation principle and technical effects are similar, and this embodiment will not be described herein.

The embodiment of the present invention further provides a readable storage medium, where a program or an instruction is stored, where the program or the instruction realizes each process of the method embodiment shown in any one of fig. 1 to fig. 3 when being executed by a processor, and the same technical effects can be achieved, and for avoiding repetition, a detailed description is omitted herein.

Wherein the processor is a processor in the electronic device described in the above embodiment. The readable storage medium includes a readable storage medium such as a Read-Only Memory (ROM), a random access Memory (Random Access Memory, RAM), a magnetic disk, an optical disk, or the like.

It should be noted that, in this document, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising one … …" does not exclude the presence of other like elements in a process, method, article, or apparatus that comprises the element. Furthermore, it should be noted that the scope of the methods and apparatus in the embodiments of the present invention is not limited to performing the functions in the order shown or discussed, but may also include performing the functions in a substantially simultaneous manner or in an opposite order depending on the functions involved, e.g., the described methods may be performed in an order different from that described, and various steps may be added, omitted, or combined. Additionally, features described with reference to certain examples may be combined in other examples.

From the above description of the embodiments, it will be clear to those skilled in the art that the above-described embodiment method may be implemented by means of software plus a necessary general hardware platform, but of course may also be implemented by means of hardware, but in many cases the former is a preferred embodiment. Based on such understanding, the technical solution of the present invention may be embodied essentially or in a part contributing to the prior art in the form of a software product stored in a storage medium (e.g. ROM/RAM, magnetic disk, optical disk) comprising several instructions for causing a terminal (which may be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.) to perform the method according to the embodiments of the present invention.

The embodiments of the present invention have been described above with reference to the accompanying drawings, but the present invention is not limited to the above-described embodiments, which are merely illustrative and not restrictive, and many forms may be made by those having ordinary skill in the art without departing from the spirit of the present invention and the scope of the claims, which are to be protected by the present invention.

Claims

1. A terminal device registration processing method applied to an authentication device, the method comprising:

receiving a storage request sent by an operation and maintenance OM server based on a registration request of first terminal equipment, wherein the storage request carries first radio frequency fingerprint information of the first terminal equipment;

2. The method of claim 1, wherein after storing the first rf fingerprint information in a pre-stored rf fingerprint library in response to the storage request, the method further comprises:

3. The method of claim 1, wherein the method further comprises, prior to storing the first rf fingerprint information in a pre-stored rf fingerprint library in response to the storage request:

4. A method according to any one of claims 1-3, wherein after storing the first radio frequency fingerprint information in a pre-stored radio frequency fingerprint library in response to the storage request, the method further comprises:

5. A terminal device registration processing method applied to an OM server, the method comprising:

6. The method of claim 5, wherein prior to comparing the first biometric information with the pre-stored second biometric information, the method further comprises:

7. The method of any one of claims 5 or 6, wherein after comparing the first biometric information with pre-stored second biometric information, the method further comprises:

8. The method according to claim 7, wherein the method further comprises, before sending a registration result notification to the first terminal device in case the first biometric information matches the second biometric information:

receiving a storage result sent by the verification device;

and determining a registration result based on the stored result.

9. A terminal device registration processing method applied to a terminal device, wherein the terminal device is a first terminal device, the method is characterized in that:

and receiving a registration result notification sent by the OM server.

10. A communication system comprising an authentication device and an OM server, wherein;

11. An authentication apparatus, comprising:

12. An OM server, comprising:

13. A terminal device, wherein the terminal device is a first terminal device, the terminal device comprising:

14. An authentication apparatus comprising: a transceiver, a memory, a processor, and a program stored on the memory and executable on the processor; characterized in that the processor is arranged to read a program in a memory for implementing the steps in the terminal device registration processing method according to any one of claims 1 to 4.

15. An OM server, comprising: a transceiver, a memory, a processor, and a program stored on the memory and executable on the processor; the terminal device registration processing method according to any one of claims 5 to 8, characterized in that the processor is configured to read a program in a memory to implement the steps in the terminal device registration processing method.

16. A terminal device, comprising: a transceiver, a memory, a processor, and a program stored on the memory and executable on the processor; the terminal device registration processing method according to claim 9, wherein the processor is configured to read a program in the memory to implement the steps in the terminal device registration processing method.