JP6692406B2 - Equipment certification method and equipment certification system - Google Patents

Description

  The present invention relates to a facility authentication method and a facility authentication system.

  With the development of Internet technology and the spread of various intelligent devices, the applications of intelligent devices to various fields are increasing. Among them, wearable devices have become popular and preferred by the public due to their miniaturization, convenience and flexibility, and to provide detection, analysis, storage and intelligent services to user information data. You can At the same time, however, wearable devices are in the early stages of development, and various security issues such as privacy leakage, misuse, and mishandling have not been completely resolved.

  Patent Document 1 discloses a two-dimensional code authentication method, in which the two-dimensional code authentication platform transmits the two-dimensional code scan information transmitted by the two-dimensional code client side and obtained by the two-dimensional code client side scanning the two-dimensional code. Upon receiving the 2D code decoding request containing the 2D code, the 2D code authentication platform decodes the 2D code scan information, responds to the garbled decoding result, and returns the decoding failure response to the 2D code client side. To do.

In addition, in response to the undeciphered decryption result, the two-dimensional code authentication platform returns a successful decryption response to the two-dimensional code client side, and the successful decryption response outputs the two-dimensional information obtained by the decryption. Including.

  When the decryption is successful, it is displayed that the two-dimensional code scan information has been passed through the encryption authentication of the third party authentication platform and is a legal two-dimensional code. If the decryption is not successful, it indicates that the two-dimensional code scan information has not passed the encryption authentication of the third-party authentication platform and there is a risk, and returns the response of failure of decryption. This prevents the user from obtaining valid two-dimensional code information.

  In Patent Document 1, an independent and reliable third-party authentication platform provides a two-dimensional code generated by encrypting private information to various two-dimensional code application platforms to enhance the security level of the two-dimensional code itself. ing. Since the important point is only the security problem of the two-dimensional code itself, only the method of increasing the security level of the two-dimensional code itself is provided by encrypting the two-dimensional code itself. However, when authenticating the equipment based on the two-dimensional code, the equipment itself, especially for wearable devices related to a large amount of personal privacy information, has a problem of how to prevent misuse or erroneous operation of the equipment. No security mechanism is provided. In addition, in equipment authentication based on only the two-dimensional code, the two-dimensional code itself can be easily copied or shared, so this type of authentication method based on the two-dimensional code itself is suitable for public situations. I can't say that

CN104769379A

  The present invention is made in view of the above problems, and provides an equipment authentication method and equipment authentication system for improving the security mechanism of an intelligent device, particularly a wearable device, and prevents misuse or erroneous operation of the equipment, The purpose is to raise the security level of the equipment authentication and ensure the legality and safety of the equipment application.

  A facility authentication method based on the technical solution of the present invention is one in which a server performs facility authentication based on a facility authentication request transmitted from a facility, and returns a facility authentication response to the facility. Upon receiving the equipment authentication request including at least the equipment factor and the private identifier transmitted and collected, the matching equipment identifier and private identifier are searched from the stored equipment identifiers and private identifiers of the associated equipment, Generates a calculated equipment identifier based on the transmitted equipment factor and compares the private identifier and calculated equipment identifier transmitted from the equipment with the matching equipment identifier and private identifier stored in the server to perform equipment authentication. The feature is that the result of equipment certification is transmitted to the equipment.

  The server generates the corresponding equipment identifier and private identifier based on the equipment factor, and performs equipment authentication based on the private equipment identifier and the calculated equipment identifier generated based on the equipment factor to prevent misuse or theft of the equipment. It can provide a reliable security mechanism to prevent, improve the safety of use of equipment, especially wearable device related to a large amount of personal information, and prevent leakage of personal information.

  Further, in the equipment authentication method based on the technical solution of the present invention, the server transmits the operation flow content to the equipment in response to the operation flow request transmitted by the equipment based on the result of the equipment authentication.

  The equipment performs the appropriate subsequent flow based on the authentication result of the server, and performs the appropriate operation based on the operation flow command sent by the server, thereby preventing the equipment user's erroneous operation and ensuring the safety of equipment use. Can be improved.

  Further, in the equipment authentication method based on the technical solution of the present invention, the server searches for the matching equipment identifier and private identifier based on the user ID, and determines that the matching equipment identifier and private identifier are stored. In this case, based on the equipment factor sent by the equipment, a calculated equipment identifier is generated by the corresponding hash algorithm, and if it is determined that there is no matching equipment identifier and private identifier, the equipment authentication failure response is sent to the equipment. To do.

  If the server verifies the equipment user's ID based on the user ID information and the private identifier, and if the verification fails, the equipment sends a response of failure of equipment authentication, causing the equipment to reject the user's operation. , It prevents the wrong operation and plagiarism of equipment and improves the safety and legality of equipment usage.

  Further, in the equipment authentication method based on the technical solution of the present invention, the server searches for the matching equipment identifier and private identifier based on the user ID, and determines that the matching equipment identifier and private identifier are stored. In this case, based on the equipment factor transmitted by the equipment, a calculated equipment identifier is generated by the corresponding hash algorithm, and when it is determined that there is no matching equipment identifier and private identifier, the user confirms the related ID to the equipment. Send a response that you need it.

  By the server performing the ID verification of the equipment user based on the user ID information and the private identifier, it is possible to prevent a thief from sending a request for private identifier generation to the server again based only on the user ID information. By preventing the theft and copying of private identifiers, the equipment is prevented from being stolen, and personal privacy information relating to the equipment, especially wearable devices, is effectively protected. Further, the reliability of the equipment authentication is improved by transmitting the response that the user needs to confirm the related ID to the equipment.

  Further, in the equipment authentication method based on the technical solution of the present invention, the server generates and associates the equipment identifier and the private identifier with the equipment before performing the equipment authentication, and the equipment is based on the equipment factor list. Receives the equipment factor that was collected and transmitted by using a hash algorithm, generates a unique equipment identifier and private identifier with a fixed length based on the equipment factor, stores the equipment identifier and private identifier, and stores the equipment Send the private identifier to the facility so that you can.

  Since the server only generates a private identifier once at the initialization stage of the equipment and sends it to the equipment, a thief can be prevented from sending a request to regenerate the private identifier to the server, and the private identifier can be stolen or copied. The prevention effectively prevents equipment theft.

  In addition, in the equipment authentication method based on the technical solution of the present invention, the server determines the uniqueness of the equipment based on the equipment factor transmitted by the equipment, and when the equipment is uniquely determined based on the equipment factor. Uses a hash algorithm to generate a fixed length and unique equipment identifier and private identifier based on the equipment factor.

  The server represents the uniqueness of the equipment, and uses the equipment factor that corresponds one-to-one with the equipment, and judges the uniqueness of the equipment based on the equipment factor transmitted by the equipment, whereby the thief is duplicated. By using the equipment information, it is possible to prevent the equipment from being stolen and improve the safety of equipment usage.

  Further, in the equipment authentication method based on the technical solution of the present invention, the equipment factor is one piece of equipment information or a combination of a plurality of pieces of equipment information in which the equipment has a one-to-one correspondence with the equipment and represents the uniqueness of the equipment. Are collected as equipment factors.

  By using a combination of one or more pieces of equipment information as equipment factors, if some of the equipment factor information, such as the hardware number, is the same as the genuine product, use a combination of multiple pieces of equipment information as equipment factors. By doing so, the reliability of equipment certification is enhanced.

  Further, in the equipment authentication method based on the technical solution of the present invention, the equipment factor list includes the equipment factor representing the equipment ID, the equipment factor representing the physical address of the equipment, the equipment factor representing the serial number of the equipment, and the equipment is activated for the first time. At least one of an equipment factor that represents a 64-bit numerical value that is generated and stored at times, an equipment factor that represents an installation ID of an equipment, an equipment factor that represents an international mobile subscriber identification number, and an equipment factor that represents an international mobile device identification number. including.

  The server can identify the uniqueness of the equipment, and by using the equipment factor corresponding to the equipment on a one-to-one basis, a thief can be prevented from stealing the equipment by using the duplicated equipment information. Improves safety of use.

  Further, in the equipment authentication method based on the technical solution of the present invention, when the server cannot uniquely determine the equipment based on the equipment factor, the server updates the equipment factor list and can uniquely determine the equipment based on the equipment factor. Up to add more equipment factors.

  The facility information can be expressed in the situation where duplicated facility information exists, because the facility factor list is updated and more facility factors are added until it is determined that the facility factor is unique. The reliability of equipment certification is improved because it can be reliably determined.

  A facility authentication system according to the present invention includes a server and a facility, the server performs facility authentication based on a facility authentication request transmitted from the facility, and returns a facility authentication response to the facility. The system is such that a server generates an equipment identifier and a private identifier based on the equipment factor transmitted by the equipment, a server-side storage module that stores the generated equipment identifier and private identifier, and sends a private identifier to the equipment. Then, the server side information transmission module that sends the equipment authentication result to the equipment is searched for a matching equipment identifier and private identifier, and a calculation equipment identifier is generated based on the equipment factor transmitted by the equipment, and a private identifier and calculation are performed. Authentication module that performs equipment authentication based on equipment identifier , And the equipment includes an equipment factor collection module that acquires the equipment factor and the private identifier, an equipment-side information transmission module that transmits the equipment factor to the server, and an equipment-side storage module that stores the private identifier. And

  By transmitting the private identifier generated by the server by the facility, the server, during the facility authentication, causes the server to calculate the calculated facility identifier based on the received private identifier and the facility factor and the corresponding stored in the storage module. By performing comparison and authentication with the equipment identifier and the private identifier, misuse and erroneous operation of equipment are prevented, the security level of equipment authentication is raised, and the legality and safety of device applications are guaranteed.

FIG. 1 is a schematic diagram showing a server structure according to an embodiment of the present invention. FIG. 2 is a schematic diagram showing a facility structure according to an embodiment of the present invention. FIG. 3 is a flowchart showing generation of equipment identifiers and private identifiers and association with equipment according to an embodiment of the present invention. FIG. 4 shows an equipment factor information list according to an embodiment of the present invention. FIG. 5 is a flowchart showing equipment authentication in the first embodiment of the present invention. FIG. 6 is a flowchart showing an example of equipment authentication in the second embodiment of the present invention. FIG. 7 is a flowchart showing another example of equipment authentication according to the second embodiment of the present invention.

  Hereinafter, the present invention will be described in more detail with reference to the drawings and the embodiments. Further, when the same or corresponding parts in the drawings are designated by the same reference numerals, duplicate description will be omitted. It should be understood that the embodiments described with reference to the drawings are merely used to explain the present invention and are not intended to limit the present invention.

Embodiment 1

  First, a schematic structural diagram of a server according to an embodiment of the present invention will be described.

  FIG. 1 is a schematic diagram showing a structure of a server 100 according to an embodiment of the present invention. As shown in FIG. 1, the server 100 includes a server-side information transmission module 110, an identifier generation module 120, an authentication module 130, and a server-side storage module 140.

  The server-side information transmission module 110 communicates with the equipment, receives the equipment factor and the private identifier transmitted by the equipment, and transmits the private identifier to the equipment. After the completion of the equipment authentication for the equipment, the server-side information transmission module 110 sends the equipment authentication result to the equipment.

  The identifier generation module 120 determines the uniqueness of the equipment factor and generates an equipment identifier and a private identifier. If it is determined that the equipment factor is not unique, the equipment factor list is updated, and more equipment factors are added until it is determined that the equipment factor is unique. When it is determined that the equipment factor is unique, a unique length and unique equipment identifier and private identifier are generated based on a hash algorithm. Although the initial factors of the equipment identifier and the private identifier may be different, the initial factors of the equipment factor and the private identifier are preset in commercial use and cannot be changed in principle. After generating the equipment identifier and the private identifier, the identifier generation module 120 stores the equipment identifier and the private identifier in the server-side storage module 140. The uniqueness of the equipment here means that there is no other equipment having the same equipment information as the equipment.

  The equipment information that can show the uniqueness of the equipment in the situation where the duplicated equipment information exists by updating the equipment factor list and adding more equipment factors until it is determined that the equipment factor is unique. The reliability of equipment certification is improved.

  In addition, since the uniqueness can be judged for the equipment factor and the uniqueness can be expressed, and the physical information corresponding to the equipment on a one-to-one basis is used as the equipment factor, the thief can use the duplicated equipment information. It prevents the equipment from being stolen and improves the safety of using the equipment.

  The authentication module 130 calculates the equipment identifier generated based on the equipment factor by the corresponding hash algorithm based on the equipment factor transmitted by the equipment, and the private identifier from the received equipment and the equipment identifier calculated above. And the equipment identifier and the private identifier stored in the server-side storage module 140 are compared for authentication. When the comparison result of the equipment authentication is coincident, the equipment authentication success information is generated, and the equipment authentication success response is transmitted to the equipment via the server side information transmission module 110. When the comparison results of the equipment authentication do not match, the equipment authentication failure information is generated, and the equipment authentication result is transmitted to the equipment via the server-side information transmission module 110.

  The server-side storage module 140 stores the equipment identifier and the private identifier generated by the identifier generation module 120, and also stores the equipment factor information list for identifying the equipment. The equipment factor information list includes the server and the server. The equipment-side application includes preset equipment factor information, and the types of the collected equipment factors are specified.

  The equipment factor information list is as shown in FIG. 4, and some equipment factors are illustrated in the equipment factor information list. For example, equipment factor DEVICE_ID representing equipment ID, equipment factor MAC_ADDRESS representing physical address of equipment, equipment number Serial Number representing serial number of equipment, equipment factor ANDROID-ID representing numerical value of 64 bits generated and stored by equipment at first start-up. (ANDROID is a registered trademark), a facility factor Installation ID representing a facility installation ID, a facility factor IMSI representing an international mobile subscriber identification number, a facility factor IMEI representing an international mobile facility identification number, and the like. However, it should be understood that equipment factors are not limited to those listed. For example, the equipment factor information includes not only the hardware factor information of the equipment corresponding to the equipment itself on a one-to-one basis, but also the software factor information other than the hardware, such as the uniqueness assigned to each equipment. It can also include software factor information, such as QR code information, which has a one-to-one correspondence with the equipment and can represent the uniqueness of the equipment.

  By using equipment factors that have a one-to-one correspondence with the equipment and can represent the uniqueness of the equipment, it is possible to prevent a thief from stealing the equipment by using the duplicated equipment information, thus ensuring the safety of equipment usage. Is improving.

  Subsequently, a schematic diagram of an equipment structure in one embodiment of the present invention will be described.

  As shown in FIG. 2, the equipment 200 includes an equipment-side information transmission module 210, an equipment-factor collection module 220, and an equipment-side storage module 230.

  The equipment factor collection module 220 collects equipment factors based on a preset equipment factor information list, and transmits the collected equipment factors to the server via the equipment side information transmission module 210. As described above, the facility factor may be hardware factor information of the facility, or software factor information for expressing the uniqueness of the facility.

  The equipment-side information transmission module 210 communicates with the server, transmits an equipment authentication request including at least an equipment factor and a private identifier to the server, and receives the equipment authentication result transmitted by the server. The equipment-side information transmission module 210 also receives the private identifier generated by the identifier generation module of the server, and transmits the private identifier to the equipment-side storage module 230 for storage.

  The equipment-side storage module 230 stores the private identifier from the server received by the equipment-side information transmission module 210.

  In the following, the flow of equipment authentication in one embodiment of the present invention will be described with reference to the drawings. First, an identifier is generated and associated with a facility before the facility is authenticated. FIG. 3 shows the generation of the identifier and the association with the facility according to the embodiment of the present invention.

  An application for collecting equipment factor information based on a preset equipment factor information list is installed in the equipment, and at the initialization stage, as shown in step S301, the application is preset. The equipment factor information is collected based on the equipment factor information list.

  In step S302, the equipment factor information collected by the equipment is transmitted to the server.

  In step S303, the server receives the equipment factor information transmitted by the equipment and determines the uniqueness of the equipment factor. If it is determined that the equipment factor is not unique, update the equipment factor list, add more equipment factors, and collect more equipment factors for the equipment until the server determines that the equipment factor is unique. Let If it is determined that the equipment factor is unique, the server generates a unique length and unique equipment identifier and private identifier based on a hash algorithm. Further, although the initial factors of the equipment identifier and the private identifier may be different, the initial factors of the equipment factor and the private factor are preset in commercial use and cannot be changed in principle. The equipment identifier generated by the server can be associated with the user ID information of the equipment user, for example, personal information such as the equipment user's employee number, identification number, and Alipay account.

  When determining the uniqueness of equipment factors, for example, in the situation where some equipment factor information such as hardware number is the same as the genuine article, update the equipment factor list and until different equipment factor information is found, By adding more equipment factors, it is possible to surely determine the equipment factor that represents the uniqueness of the equipment, and improve the reliability of equipment certification. In addition, a thief is prevented from stealing the equipment by using the duplicated equipment information, and the safety of the equipment is improved.

  In step S304, the equipment identifier and the private identifier are stored in the server-side storage module 140, and the private identifier is transmitted to the corresponding equipment.

  In step S305, the equipment stores the received private identifier. The facility saves internal memory space by storing only private identifiers.

  As has been explained here, if the server has completed the generation of the facility identifier and the private identifier of the facility and associated them, the above steps can be omitted and the facility authentication can be performed directly. it can.

  Next, a flow when the server authenticates equipment for which the server has already completed the association in one embodiment of the present invention will be described.

  FIG. 5 shows a flowchart of equipment authentication according to an embodiment of the present invention.

  In the case of authenticating the equipment whose association is completed, as shown in FIG. 5, the equipment collects the equipment factor and reads the private identifier from the equipment-side storage module 230 in step S501.

  In step S502, the equipment transmits the equipment authentication request information to the server. The equipment authentication request information includes at least the collected equipment factor and private identifier. The facility converts the facility factor and the private identifier into a message, and transmits the message to the server via the facility-side information transmission module 210.

  In step S503, the server receives the facility authentication request information transmitted by the facility, and searches the server-side storage module 140 for a matching facility identifier and private identifier based on the user ID information, and verifies the user ID. .. If no facility identifier and private identifier matching the user ID information are found in the server-side storage module 140, the facility is notified of the verification failure.

  By the server performing the ID verification of the equipment user based on the user ID information and the private identifier, it is possible to prevent a thief from sending a request for private identifier generation to the server again based only on the user ID information. By preventing the theft or copying of the private identifier, theft of the equipment is prevented, and the private information about the equipment, especially the wearable device, is effectively protected.

  A matching equipment identifier and private identifier are searched for based on the user ID information, but if they cannot be matched, the process proceeds to step S504. In step S504, the identifier generation module 120 newly calculates the facility identifier by the corresponding hash algorithm based on the facility factor information transmitted from the facility by the server.

  In step S505, the authentication module 130 of the server authenticates the received private identifier from the equipment and the equipment identifier calculated in step S504 with the matching equipment identifier and private identifier stored in the server-side storage module 140. Make a comparison. If the comparison result of the equipment authentication is matched, the success information of the equipment authentication is generated, and if the comparison result of the equipment authentication is not matched, the failure information of the equipment authentication is generated.

  In step S506, the server-side information transmission module 110 transmits the equipment authentication result obtained in step S505 to the equipment. The equipment operates based on the transmitted command. Specifically, if the equipment authentication result received by the equipment is successful, the equipment permits the user to perform the following operation. If the equipment authentication result received by the equipment is authentication failure, the equipment rejects the user's next operation.

  Further, the equipment can also send an operation flow request to the server based on the result of the equipment authentication sent by the server, and the server can also send the operation flow content to the equipment. The content of the operation flow here refers to commands of various operations performed by the server on the equipment.

  The facility stores the private identifier generated by the server so that, during facility authentication, the server computes the calculated facility identifier based on the received private identifier and the facility factor and the corresponding stored in the storage module. By performing comparison and authentication with the equipment identifier and the private identifier, misuse and erroneous operation of equipment are prevented, the security level of equipment authentication is raised, and the legality and safety of device applications are guaranteed.

Embodiment 2

Hereinafter, the flow of equipment authentication in another embodiment of the present invention will be described with reference to FIGS.
[Example 1]

  FIG. 6 shows a flowchart for performing equipment authentication on equipment, for example, a wearable device, in another embodiment of the present invention.

  As shown in FIG. 6, in step S601, the user activates the equipment, for example, the wearable device. In step S602, the wearable device collects equipment factor information based on a preset equipment factor information list.

  In step S603, the wearable device transmits the collected equipment factor and private identifier to the server.

  In step S604, the server receives the equipment authentication request including at least the equipment factor and the private identifier transmitted from the wearable device, and performs matching with the equipment identifier and the private identifier stored in the server based on the user ID information. ..

  In step S605, if the server determines that the corresponding equipment identifier and private identifier are stored in a matched manner, that is, if “YES” in step S605, the process proceeds to step S606.

  In step S606, the identifier generation module 120 of the server generates a calculated facility identifier by the corresponding hash algorithm based on the received facility factor from the wearable device.

  In step S608, the server performs equipment authentication based on the equipment authentication request. Specifically, the authentication module 130 of the server sends the received private identifier from the wearable device and the calculated equipment identifier generated by the corresponding hash algorithm based on the equipment factor transmitted by the wearable device in step S606 to the server side. Authentication comparison is performed with the equipment identifier and the private identifier stored in the storage module 140, and the equipment authentication result is generated, and in step S609, the server transmits the equipment authentication result to the wearable device.

  In addition, in step S605, when the server determines that the corresponding equipment identifier and private identifier do not match, the process proceeds to step S607 to generate a response of equipment authentication failure, and in step S609, the equipment is Send the authentication result to the wearable device.

  In step S610, the wearable device receives the response of the result of the equipment authentication from the server, and if the result of the equipment authentication is successful, in step S611, the wearable device determines the user's response based on the result response of the equipment authentication. Allow the operation this time. When the result of the equipment authentication is unsuccessful, the wearable device rejects the user's next operation in response to the result of the equipment authentication in step S612.

  The server first matches the received private identifier from the equipment with the corresponding equipment identifier and private identifier stored in the server side storage module, and if the matching fails, returns the equipment authentication failure feedback to the equipment. Thus, the misuse or illegal theft of the equipment is prevented, and the legality and safety of using the equipment, especially the wearable device, are improved.

Also, since the server only generates a private identifier once at the equipment initialization stage and sends it to the equipment, it prevents the thief from sending a private identifier regeneration request to the server, and steals or copies the private identifier. By preventing this, equipment theft is effectively prevented.
[Example 2]

  FIG. 7 illustrates a flow of performing equipment authentication for equipment, for example, a wearable device, in another embodiment of the present invention.

  As shown in FIG. 7, in another example of the equipment authentication of the present invention, as in the example of the equipment authentication of the present invention shown in FIG. 6, when the user starts the operation of the wearable device, the wearable device is set in advance. The equipment factor information is collected based on the prepared equipment factor information list, and the collected equipment factor and private identifier are transmitted to the server. The server receives the equipment authentication request including at least the equipment factor and the private identifier transmitted by the wearable device, and performs matching with the equipment identifier and the private identifier stored in the server based on the user ID information. When the server determines that the corresponding equipment identifier and private identifier do not match, the server sends a response to the wearable device that the user needs to confirm the related ID in step S707. If the server determines that the corresponding equipment identifier and private identifier are matched and the processing flow is the same as the example of the present invention shown in FIG. 6, description thereof will be omitted here.

  The equipment authentication method according to the present invention generates a corresponding equipment identifier and a private identifier based on the equipment factor, and performs equipment authentication based on the calculated equipment identifier generated based on the private identifier and the equipment factor, It is possible to provide a reliable security mechanism for preventing misuse or theft of equipment, improve the safety of use of a wearable device related to equipment, especially a large amount of personal information, and prevent leakage of personal information.

  The server first matches the received private identifier from the equipment with the corresponding equipment identifier and private identifier stored in the server-side storage module, and if the matching fails, gives feedback to the equipment that the equipment authentication has failed. It is returned to prevent misuse or illegal theft of the equipment, and improves the legality and safety of the use of the equipment, especially wearable devices.

  Further, since the uniqueness of the equipment can be expressed and the equipment factor corresponding to the equipment is used one-to-one, it is possible to prevent the thief from stealing the equipment by using the duplicated equipment information. Improves safety of use.

  Also, since the server only generates a private identifier once at the initialization stage of the equipment and sends it to the equipment, it prevents a thief from sending a request to regenerate the private identifier to the server, stealing or copying the private identifier. By preventing this, equipment theft is effectively prevented.

  The embodiments and examples of the present invention have been described above with reference to the drawings. Among them, the embodiments and examples described above are specific examples of the present invention and are only used for understanding the present invention, and do not limit the scope of the present invention. Those skilled in the art can make various modifications, combinations, and rational omissions of elements to each embodiment and example based on the technical concept of the present invention. Means are within the scope of the invention.

100 server 110 server side information transmission module 120 identifier generation module 130 authentication module 140 server side storage module 200 equipment 210 equipment side information transmission module 220 equipment factor collection module 230 equipment side storage module

Claims (7)

In the equipment authentication method, the server performs equipment authentication based on the equipment authentication request transmitted by the equipment, and returns a response of equipment authentication to the equipment,
The server is
It received the equipment authentication request, including at least equipment factor and private identifier before Symbol equipment has been sent to collect,
Search for a matching equipment identifier and private identifier from the stored equipment identifiers and private identifiers of associated equipment,
Generating a calculated equipment identifier based on the equipment factor transmitted from the equipment;
Performs equipment authentication by comparing the private identifier and the calculated equipment identifier transmitted from the equipment with the matching equipment identifier and private identifier stored in the server,
And sends the result of the equipment authentication to the facility,
Before performing the equipment authentication, the equipment identifier and the private identifier are generated and associated with the equipment,
The equipment receives the equipment factors collected and transmitted based on the equipment factor list,
If it cannot be determined that the equipment factor transmitted by the equipment is uniquely stored in the server,
The equipment factor list is updated, and addition of equipment factors is continued until the confirmation can be performed ,
Equipment certification method. The server is
Based on the result of the equipment authentication, in response to the operation flow request transmitted by the equipment, the operation flow content is transmitted to the equipment,
The facility authentication method according to claim 1. The server is
Search for a matching equipment identifier and private identifier based on the user ID,
If matching equipment identifier and the private identifier is determined to be stored, based on the transmitted the plant factor before Symbol equipment, the corresponding hash algorithm to generate the calculated equipment identifier,
When it is determined that there is no matching equipment identifier and private identifier, a response of equipment authentication failure is transmitted to the equipment,
The equipment authentication method according to claim 1. The server is
Search for a matching equipment identifier and private identifier based on the user ID,
If it is determined that the matching equipment identifier and private identifier are stored, based on the equipment factor transmitted by the equipment, generate the calculation equipment identifier by the corresponding hash algorithm,
When it is determined that there is no matching equipment identifier and private identifier, a response that the user needs to confirm the related ID is transmitted to the equipment.
The equipment authentication method according to claim 1. The facility factor is one in which the facility has a one-to-one correspondence with the facility and collects one facility information or a combination of a plurality of facility information representing the uniqueness of the facility as the facility factor. To do
The facility authentication method according to claim 1 . The equipment factor list is an equipment factor representing an equipment ID, an equipment factor representing a physical address of the equipment, an equipment factor representing a serial number of the equipment, an equipment factor representing a 64-bit numerical value generated and stored by the equipment at the first startup, At least one of an equipment factor representing an installation ID, an equipment factor representing an international mobile subscriber identification number, and an equipment factor representing an international mobile device identification number is included.
The facility authentication method according to claim 1 . A facility authentication system including a server and a facility, wherein the server performs facility certification based on a facility certification request transmitted by the facility, and returns a response of facility certification to the facility,
The server is
An identifier generation module that generates a facility identifier and a private identifier based on the facility factor transmitted by the facility,
A server-side storage module that stores the generated equipment identifier and private identifier,
A server-side information transmission module that transmits the private identifier to the facility and transmits a result of facility authentication to the facility;
An authentication module that searches for the matching equipment identifier and private identifier, generates a calculation equipment identifier based on the equipment factor transmitted by the equipment, and performs equipment authentication based on the private identifier and the calculation equipment identifier, Including,
The equipment is
A facility factor collection module for obtaining a facility factor and a private identifier,
An equipment-side information transmission module for transmitting the equipment factor to the server,
Look including the, and the equipment side storage module for storing the private identifier,
The identifier generation module is
Before performing the equipment authentication, the equipment identifier and the private identifier are generated and associated with the equipment,
The equipment receives the equipment factors collected and transmitted based on the equipment factor list,
If it cannot be determined that the equipment factor transmitted by the equipment is uniquely stored in the server,
The equipment factor list is updated, and addition of equipment factors is continued until the confirmation can be performed ,
Equipment certification system.

Images