TWI588782B - Security method, security gate and server - Google Patents

Description

Security method, security gate and server

The disclosure relates to a preservation method and system.

In order to protect the safety of personal and property, various security mechanisms have been created. The current security mechanism, using the access control system, mostly uses keys, proximity cards or passwords. The key or proximity card is troublesome and lost, often causing inconvenience. Or the proximity card is even at risk of being stolen; forgetting the password or even cracking the password is even more troublesome.

Providing a convenient and secure security mechanism is an urgent problem to be solved.

The present disclosure discloses a security system and method for authenticating using a mobile device.

According to an exemplary embodiment of the present disclosure, a security method is provided for a security system, the method comprising: receiving, by the security gate, an authentication request transmitted from the mobile device, generating a security gate identification message, and transmitting the security gate identification a message and a first security gate identification code to the mobile device; the server receives the security gate identification message, the first security gate identification code and the mobile device identification code transmitted from the mobile device, and decrypts the security gate identification message, Compared to Mobile device identification code and authority data, if successful, the encryption operation generates an authorization code, returns the authorization code and the first security gate identification code to the mobile device; and the authorization code transmitted by the mobile device from the mobile device And the first security gate identification code, the decryption operation is performed on the authorization code, and if the verification is correct, the authentication request is approved.

According to an exemplary embodiment of the present disclosure, a security method is provided, which is applicable to a security gate, comprising: receiving an authentication request transmitted from a mobile device, generating a security gate identification message, and returning the security gate identification message and the first security gate And the identifier is sent to the mobile device; and the authorization code and the first security gate identification code transmitted from the mobile device are received, and the authorization code is decrypted and verified, and if the authentication is correct, the authentication request is approved; wherein the authorization code is Receiving, by the server, the security gate identification message, the first security gate identification code and the mobile device identification code transmitted by the mobile device, the server decrypting the security gate identification message, comparing the mobile device identification code and the authority The data, if successful, the server encryption operation generates the authorization code, and the server returns the authorization code and the first security gate identification code to the mobile device.

According to an exemplary embodiment of the present disclosure, a security gate is provided, including: a security gate communication unit configured to transmit a reception message between the security gate and a mobile device; and a security gate control unit, The security gate control unit is configured to: receive an authentication request transmitted from the mobile device, generate a security gate identification message, and return the security gate identification message and the first security gate identification code to the mobile device; and receive the mobile device pass Sending the authorization code and the first security gate identification code, decrypting the authorization code, performing verification, and if so, approving the authentication request; wherein the authorization code is received by the server from the mobile device Identifying the message, the first security gate identification code and the mobile device identification code, the server decrypting the security gate identification message, comparing the mobile device identification code and the authority data, if successful, the server encryption operation generates the authorization And the server returns the authorization code and the first security gate identification code to the mobile device.

According to an exemplary embodiment of the present disclosure, a security method is provided, which is applicable to a server, including: receiving a security gate identification message transmitted by the mobile device, a first security gate identification code, and a mobile device identification code; Decrypting the identification message; and comparing the mobile device identification code and the authority data, if successful, the encryption operation generates an authorization code, and returns the authorization code and the first security gate identification code to the mobile device; wherein the security gate identification message Is generated by the security gate receiving the authentication request transmitted from the mobile device, and the security gate is returned by the security gate to the mobile gate identification message and the first security gate identification code to the mobile device; and when the security gate is received from the action After the authorization code and the first security gate identification code transmitted by the device, the authorization code is decrypted and verified, and if it is correct, the authentication request is approved.

According to an exemplary embodiment of the present disclosure, a server is provided, including: a server communication unit configured to transmit a received message between the server and a mobile device; and a server control unit, the server The server control unit is configured to: receive from the mobile device Preserving the gate identification message, the first security gate identification code and the mobile device identification code; decrypting the security gate identification message; and comparing the mobile device identification code and the authority data, if successful, the encryption operation generates an authorization code, and the authorization is returned And the first security gate identification code is sent to the mobile device; wherein the security gate identification message is generated by the security gate receiving the authentication request transmitted by the mobile device, and the security gate is returned by the security gate and The first security gate identification code is sent to the mobile device; and when the security gate receives the authorization code and the first security gate identification code transmitted from the mobile device, decrypting the authorization code and performing verification, if correct Approve the certification request.

In order to better understand the above and other aspects of the present invention, the following detailed description of the embodiments and the accompanying drawings are set forth below.

1, 4‧‧‧Security system

100‧‧‧Server

200‧‧‧ mobile device

300‧‧‧Security gate

S201~S203, S301~S309, S501~S502, S601~S604‧‧‧ steps

701‧‧‧Security gate communication unit

702‧‧‧Security gate control unit

801‧‧‧Server communication unit

802‧‧‧Server Control Unit

FIG. 1 is a block diagram showing a security system according to an embodiment of the present invention.

Figures 2 to 3 illustrate a method of preservation in an embodiment of the present invention.

FIG. 4 is a schematic diagram of message transmission in a security system according to an embodiment of the present invention.

Figures 5-6 show the synchronization process of an embodiment of the present invention.

FIG. 7 is a block diagram showing the security gate of an embodiment of the present invention.

FIG. 8 is a block diagram showing a server of an embodiment of the present invention.

The technical terms of this specification refer to the habits of the technical field. Terms, such as the specification, are used to describe or define some terms. The interpretation of the terms is based on the description or definition of this specification. In addition, the relative relationship between the objects or events described in this specification may include direct or indirect relationships, and the term "indirect" means that there is an intermediate or physical space between the objects, or Refers to the existence of intermediate events or time intervals between events. Furthermore, the following contents are related to the preservation method and system, and the technical or principle of the prior art will not be described if it does not involve the technical features of the present case. In addition, the shapes, dimensions, proportions, and sequence steps of the elements in the drawings are merely illustrative, and are intended to be used by those of ordinary skill in the art to understand the present invention, and are not intended to limit the scope of the present invention.

In addition, each embodiment of the following description has one or more technical features respectively, which does not mean that all technical features in any embodiment must be implemented at the same time, or only in different embodiments can be separately implemented. One or all technical features. In other words, those skilled in the art can selectively implement some or all of the technical features of any embodiment according to the needs of the present disclosure or the design concept. Alternatively, a combination of some or all of the technical features of the various embodiments may be selectively implemented, thereby increasing the flexibility of the present implementation. The disclosure of the present invention includes the security system and method, but the technical features of the embodiments of the present invention are not limited to the present case, and are only for the purpose of illustration and the person skilled in the art understand the use of the case. In addition, where possible, those skilled in the art can select equivalent elements or steps to implement the present invention based on the disclosure of the present disclosure. The case, that is, the implementation of this case is not limited to the embodiment disclosed in this case.

In addition, if the individual components included in the security gate, server and mobile device of the present case are known components, the following description will abbreviate the details of the individual components implemented without affecting the full disclosure and implementation. .

1 illustrates a functional block diagram of a security system 1 including at least a server 100, a mobile device 200, and a security gate 300, in accordance with an exemplary embodiment. The mobile device 200 mentioned in the present disclosure may be, for example, a wireless telephone, a notebook computer, etc., and the security gate 300 may be, for example, an electronic lock or another security enable device; the electronic lock may For example, the access control of the residence, the car door lock, etc., the other security activation device, for example, the activation of the data reading authority, the analogy or the output of the digital signal.

The mobile device 200 transmits an authentication request to the security gate 300, and the security gate transmits the identification related information to the mobile device 200. The mobile device 200 transmits the related information and the mobile device identification code to the server 100, and the server 100 confirms the authority and then returns the message. The relevant information is authorized to the mobile device 200 and transmitted to the security gate 300 by the mobile device 200; after the verification, the security gate 300 determines whether to approve the authentication request of the mobile device 200. The approval of the security gate 300, for example, is to activate the unlocking action of the electronic lock, or to pass the authentication or the reading permission of a database, and the like.

Please refer to FIG. 2, which shows a security party according to an embodiment of the present disclosure. In step S201, the security gate 300 receives the authentication request transmitted from the mobile device 200, generates a security gate identification message, and returns the security gate identification message and the first security gate identification code to the mobile device 200; in step S202 Receiving, by the server 100, the security gate identification message, the first security gate identification code and the mobile device identification code transmitted from the mobile device 200, decrypting the security gate identification message, and comparing the mobile device identification code and the authority data, if If successful, the further encryption operation generates an authorization code belonging to the mobile device, and the server transmits the authorization code and the first security gate identification code to the mobile device; in step S230, the security gate 300 receives the authorization code transmitted from the mobile device 200 and The first security gate identification code decrypts the authorization code and approves the authentication request if the verification is correct.

3 shows an embodiment according to the step of FIG. 2, in which the step S301 holds the authentication request sent from the mobile device; in step S302, the security gate 300 generates the first security gate digital, the second public key (PU2) and the first a private key (PR2), and encrypting the first security gate digital and the second public key (PU2) using the first private key (PR1) to generate a security gate identification message; and step S303 to secure the gateback security gate identification message And the first security gate identification code is sent to the mobile device, and the mobile device transmits the message and the mobile device identification code to the server; and step S304: the server 300 decrypts the security gate identification message by using the first public key (PU1). The first security gate digital and the second public key (PU2) are taken out, and the mobile device identification code and the authority data are compared to determine whether there is permission to open the security gate. If the permission comparison is successful, step S305 is performed: the server 100 encrypting the first security gate digital generation authorization code using the second public key (PU2), and updating the first public key (PU1) to the second public key (PU2); step S306: the server 100 returns the authorization The code and the first security gate identification code are transmitted to the mobile device 200, and then transmitted by the mobile device 200 to the security gate 300; step S307: when the security gate 300 receives the authorization code transmitted by the mobile device 200 and the first security gate identification code, the first use The second private key (PR2) decrypts the authorization code to obtain the first security gate number; step S308: compares the first security gate identification code received from the mobile device 200 with the original stored in the security gate 300 a security gate identification code, and a first security gate digitally obtained by comparing the decryption with a first security gate number originally stored in the security gate 300; step S309: if the authentication request is correct, the first private key is approved ( PR1) is updated to the second private key (PR2).

According to an embodiment, if the authority comparison of the server 100 in step S304 is unsuccessful, then the no-privileged message is replied to the mobile device 200.

According to an embodiment, if the security gate 300 is incorrectly aligned in step S308, a reply authentication approval message is sent to the mobile device 200.

According to an embodiment, at step 302, the first gate is generated, the second public key (PU2) and the second private key (PR2) are randomly generated.

According to an embodiment, the step of generating a first hold gate at step 302 is generated by a random number function.

According to an embodiment, the server returns the authorization code in step S306. And the first security gate identification code to the mobile device, the server further comprises: returning an authorization time to the mobile device; in step S308, the step of maintaining the gate comparison, the security gate 300 further comprises receiving the authorization time transmitted from the mobile device 200. And confirm whether it is currently within the authorization time.

According to an embodiment, the mobile device identification code includes, for example, a telephone number, an International Mobile Subscriber Identification Number (IMSI), an International Mobile Equipment Identification Number (IMEI), and a near field communication. Identification code or ID number, etc. According to an embodiment, the mobile device identification code is a unique identification code of the mobile device.

4 shows a schematic diagram of message transfer between the server 100, the mobile device 200, and the security gate 300 in the security system according to the flow of FIG. The related process steps have been described in detail above and will not be described here.

In order to prevent the possible key unsynchronization of the system, a synchronization process is proposed, as explained below.

5 shows an embodiment of the synchronization process. Step S501: The security gate 300 accepts the first synchronization request transmitted from the mobile device 200, generates a third public key (PU3) and a third private key (PR3), and returns a third public key (PU3) and a first security gate identification code to the mobile device 200; step S502: the server 100 receives a second synchronization request transmitted by the mobile device 200, the second synchronization request including the third disclosure The key (PU3) and the first security gate identification code update the first public key (PU1) to the third public key (PU3).

Figure 6 is a further embodiment of the synchronization process in accordance with Figure 5. Steps S601 to S602 are the same as steps S501 to S502, and are not described herein again; if the server 100 updates the public key successfully, the synchronization success message is returned to the mobile device (step S603); and the security gate 300 is accepted from the The synchronization success message transmitted by the mobile device, and updating the first private key (PR1) to the third private key (PR3) (step S604); in one embodiment, the security gate 300 further includes whether the reply electronic lock is updated. success.

According to an embodiment, the synchronization process described above is initiated upon initial, periodic, or operational failure of the security system.

According to an embodiment, the encryption/decryption described in the disclosure includes: an asymmetric encryption and decryption algorithm, such as an RSA encryption algorithm, an ElGamal encryption algorithm, a Knapsack algorithm, and a Rabin (Rabin-Karp algorithm). ), Diffie-Hellman key exchange algorithm, Elliptic Curve Cryptography (ECC) in the Diffie-Hellman key exchange agreement.

[guarantee gate]

Figure 7 shows a further block diagram of the security gate 300, which includes a security gate communication unit 701 responsible for transmitting information to the mobile device; and a security gate control unit 702 configured to perform the steps of performing the security gate of the above embodiment. According to an embodiment, the security gate control unit 702 includes a processing unit 704 for reading at least one readable code from one or more memory modules to perform the functions implemented by the security gate control unit. According to another implementation For example, the security gate control unit 702 is implemented by at least one integrated circuit.

According to an embodiment, the maintenance gate 300 of FIG. 7 further includes a switch 703 that is activated when the security gate control unit approves the authentication request.

According to an embodiment, when the security gate control unit 702 approves the authentication request, a security right is initiated.

According to an embodiment, the security gate communication unit 701 of FIG. 7 includes a short-range communication unit, which may be, for example, Near Field Communication (NFC), Bluetooth, ZigBee, WIFI or Ultra-wideband. Such as the standard communication unit.

〔server〕

8 shows a further block diagram of the server 100. The server 100 includes a server communication unit 801 responsible for transmitting information to and from the mobile device, and a server control unit 802 configured to perform the execution steps of the server 100 of the above embodiment. According to an embodiment, the server control unit 802 includes a processing unit 803 for reading at least one readable code from one or more memory modules to complete the functions implemented by the server control unit 802. . According to another embodiment, the server control unit 802 is implemented in at least one integrated circuit.

According to an embodiment, the server communication unit 801 of FIG. 8 includes a remote communication unit, which may be, for example, a WIFI, a third generation mobile communication technology (3rd Generation: 3G), a 3.5G, a fourth generation mobile communication technology (4G), long Long Term Evolution (LTE) or Worldwide Interoperability for Microwave Access (WIMAX), and other communication units.

In summary, although the present technology has been disclosed above by way of example, it is not intended to limit the disclosure. Those of ordinary skill in the art to which the invention pertains may make various changes and modifications without departing from the spirit and scope of the invention. Therefore, the scope of protection of this case is subject to the definition of the scope of the patent application attached.

S201~S203‧‧‧Steps

Claims (32)

A security method, applicable to a security system, comprising: receiving, by a security gate, an authentication request transmitted from a mobile device, generating a first security gate digital number, and encrypting the first security gate digital to generate a security gate identification And returning the security gate identification message and a first security gate identification code to the mobile device; receiving, by the server, the security gate identification message, the first security gate identification code and an action transmitted by the mobile device The device identification code decrypts the security gate identification message, and generates an authorization code for the mobile device identification code and a permission data, if successful, and returns the authorization code and the first security gate identification code to the action Receiving, by the security gate, the authorization code transmitted by the mobile device and the first security gate identification code, decrypting the authorization code to obtain the first security gate number, and comparing the backhaul from the mobile device The first security gate identification code and the first security gate identification code originally stored in the security gate are compared and decrypted to obtain the first security gate digital number and the original security gate The first gate of digital preservation, to verify if the correct authentication request approval. The security method of claim 1, further comprising: the security gate receiving the authentication request transmitted by the mobile device, generating the first security gate digital, a second public key (PU2) and a second a private key (PR2), and encrypting the first security gate number and the second public key (PU2) using a first private key (PR1) to generate the security gate identification message; The server decrypts the security gate identification message by using a first public key (PU1), and extracts the first security gate number and the second public key (PU2), and compares the mobile device identification code with the authority data. And if successful, encrypting the first security gate digitally using the second public key (PU2) to generate the authorization code, and updating the first public key (PU1) to the second public key (PU2); The security gate receives the authorization code transmitted by the mobile device and the first security gate identification code, and decrypts the authorization code by using the second private key (PR2) to obtain the first security gate number, and compares The first security gate identification code returned from the mobile device and the first security gate identification code originally stored in the security gate are compared with the decrypted first security gate digital number and the original storage gate The first security gate number, if correct, approves the authentication request and updates the first private key (PR1) to the second private key (PR2). The security method as claimed in claim 2, further comprising: the security gate receiving a first synchronization request transmitted from the mobile device, generating a third public key (PU3) and a third private key ( PR3), and returning the third public key (PU3) and the first security gate identification code to the mobile device; and the server accepts one of the second synchronization request transmitted from the mobile device, the second synchronization request Including the third public key (PU3) and the first insurance The full gate identification code updates the first public key (PU1) to the third public key (PU3). The method for preservation according to claim 3, further comprising: if the server updates the public key successfully, returning a first synchronization success message to the mobile device; and the security gate is received from the mobile device One of the second synchronization success messages updates the first private key (PR1) to the third private key (PR3). The security method of claim 2, wherein the first security gate number, the second public key (PU2), and the second private key (PR2) are randomly generated by the security gate. The preservation method of claim 2, wherein the first security gate number is generated by a random number function. The security method as claimed in claim 1, wherein the encryption operation and the decryption operation comprise: an asymmetric encryption and decryption algorithm. The security method of claim 1, further comprising: the server further transmitting an authorization time to the mobile device; and the security gate receiving the authorization time transmitted from the mobile device, and confirming whether the current time is The authorization time. The security system of claim 1, wherein the mobile device identification code comprises a telephone number, an international mobile subscriber identity, a mobile communication international identifier, a near field communication identifier or an identity card number. A security method, applicable to a security gate, comprising: receiving an authentication request transmitted from a mobile device, generating a first security gate digital number, and encrypting the first security gate digital to generate a security gate identification message and returning The security gate identification message and a first security gate identification code are sent to the mobile device; and an authorization code transmitted by the mobile device and the first security gate identification code are received, and the authorization code is decrypted to obtain the first a security gate digital, comparing the first security gate identification code returned from the mobile device with the first security gate identification code originally stored in the security gate and comparing the decrypted first digital security gate with the original The first security gate number stored in the security gate is verified for verification, and if it is correct, the authentication request is approved; wherein the server receives the security gate identification message transmitted from the mobile device, the first security gate identification code And a mobile device identification code, the server decrypts the security gate identification message, and compares the mobile device identification code with a permission data, and if successful, the server encrypts the operation The authorization code, the authorization code to the server and return the first identifiers to the preservation brake mobile device. The preservation method described in claim 10 of the patent scope further includes: Receiving the authentication request transmitted by the mobile device, generating the first security gate number, a second public key (PU2) and a second private key (PR2), and encrypting with a first private key (PR1) The first security gate digital and the second public key (PU2) to generate the security gate identification message; and receiving the authorization code and the first security gate identification code transmitted by the mobile device, using the second private key (PR2) decrypting the authorization code to obtain the first security gate number, comparing the first security gate identification code returned from the mobile device with the first security gate original stored in the security gate And correcting the first security gate digitally obtained by the decryption and the first security gate digitally stored in the security gate, and if yes, approving the authentication request and updating the first private key (PR1) to the first a private key (PR2); wherein the server decrypts the security gate identification message using a first public key (PU1), and extracts the first security gate number and the second public key (PU2) The mobile device identification code and the permission data, if successful, use the first Public Key (PU2) encrypting the first digital gate to preserve the generated authorization code and the first public key (PU1) for updating a second public key (PU2). The security method of claim 11, further comprising: accepting a first synchronization request transmitted from the mobile device; and generating a third public key (PU3) and a third private key (PR3) And returning the third public key (PU3) and the first security gate identification code to the mobile device; The server receives a second synchronization request transmitted from the mobile device, and the second synchronization request includes the third public key (PU3) and the first security gate identification code, and the first public key ( PU1) is updated to the third public key (PU3). The method for preservation according to claim 12, further comprising: accepting a second synchronization success message transmitted from the mobile device, and updating the first private key (PR1) to the third private key ( PR3). The security method of claim 11, further comprising: randomly generating the first security gate number, the second public key (PU2), and the second private key (PR2). The method for preservation according to claim 11 further includes: generating the first security gate number by a random number function. The security method as claimed in claim 10, further comprising: receiving an authorization time transmitted from the mobile device, and confirming whether the authorization time is currently in the authorization time. A security gate includes: a security gate communication unit configured to transmit a received message between the security gate and a mobile device; and a security gate control unit configured to: Receiving an authentication request transmitted from the mobile device, generating a first security gate digital number, and encrypting the first security gate digital to generate a guarantee The full gate identifies the message, and returns the security gate identification message and a first security gate identification code to the mobile device; and receives an authorization code transmitted from the mobile device and the first security gate identification code, the authorization code Performing a decryption operation to obtain the first security gate number, comparing the first security gate identification code returned from the mobile device with the first security gate identification code originally stored in the security gate and comparing and decrypting The first security gate number and the first security gate number originally stored in the security gate are verified for verification, and if the authentication request is correct, the authentication request is received by the server; wherein the security gate transmission information transmitted by the mobile device is received by the server The first security gate identification code and a mobile device identification code are decrypted by the server, compared to the mobile device identification code and a permission data. If successful, the server encrypts the operation to generate the authorization. And the server returns the authorization code and the first security gate identification code to the mobile device. For example, in the security gate of claim 17, the security gate control unit is further configured to: receive the authentication request transmitted by the mobile device, and generate the first security gate digital and a second public key (PU2) And the second private key (PR2), and encrypting the first security key and the second public key (PU2) using a first private key (PR1) to generate the security gate identification message; Receiving the authorization code transmitted by the mobile device and the first security gate identification code, using the second private key (PR2) to decrypt the authorization code to obtain the first security gate number, and comparing the action The first security gate identification code returned by the device and the first security gate identification code originally stored in the security gate are compared with the decrypted first security gate digital number and the first security stored in the security gate The gate number, if correct, approves the authentication request and updates the first private key (PR1) to the second private key (PR2); wherein the server uses a first public key (PU1) to The security gate identification message is decrypted, and the first security gate number and the second public key (PU2) are retrieved, and the mobile device identification code and the authority data are compared, and if the success is used, the second public key (PU2) is used for encryption. The first security gate digitally generates the authorization code and updates the first public key (PU1) to the second public key (PU2). For example, the security gate described in claim 17 further includes: a switch that is activated when the security gate control unit approves the authentication request. The security gate according to claim 17, wherein the security gate communication unit comprises: a communication unit conforming to specifications such as NFC, Bluetooth, ZigBee, WIFI or Ultra-wideband. The security gate of claim 17, wherein the security gate control unit comprises a processing unit for reading from one or more memory modules At least one readable code can be used to complete the functions implemented by the security gate control unit. The security gate of claim 17, wherein the security gate control unit is implemented by at least one integrated circuit. A security method, applicable to a server, comprising: receiving a security gate identification message transmitted from a mobile device, a first security gate identification code and a mobile device identification code; decrypting the security gate identification message, taking out a first And maintaining an authorization code for the mobile device identification code and a permission data, if successful, the encryption operation generates an authorization code, and returns the authorization code and the first security gate identification code to the mobile device; wherein, the security device The gate identification message is generated by a security gate receiving an authentication request transmitted from the mobile device, and encrypting the first security gate digital to generate the security gate identification message, and the security gate identification message is returned by the security gate And the first security gate identification code to the mobile device; and after the security gate receives the authorization code and the first security gate identification code transmitted from the mobile device, decrypting the authorization code to obtain the first a full gate digital, comparing the first security gate identification code returned from the mobile device with the first security gate identification code originally stored in the security gate and decrypting The gate first digital preservation and preservation of the original deposit to the gate of the The first security gate is verified for verification and, if correct, the certification request is approved. The security method of claim 23, wherein the first public key (PU1) is used to decrypt the security gate identification message, and the first security gate digital and a second public key (PU2) are extracted. And generating the authorization code by encrypting the first security key using the second public key (PU2) if the mobile device identification code and the permission information are successful, and the first public key (PU1) Updating to the second public key (PU2); wherein the first security gate number and the second public key (PU2) are generated by the security gate receiving the authentication request transmitted by the mobile device, and using one The first private key (PR1) encrypts the first security gate digital and the second public key (PU2) to generate the security gate identification message; and the security gate receives the authorization code transmitted from the mobile device and the After the first security gate identification code, the second private key (PR2) is used to decrypt the authorization code to obtain the first security gate number, and the first security gate identification returned from the mobile device is compared. The code and the first security gate identified in the security gate And comparing the first secured gate digitally obtained by the decryption with the first security gate digitally stored in the security gate, if the correct gate approves the authentication request and updates the first private key (PR1) to The second private key (PR2). The security method of claim 24, further comprising: accepting a second synchronization request transmitted from the mobile device, the second synchronization request including a third public key (PU3) and the first security gate An identification code; and updating the first public key (PU1) to the third public key (PU3); wherein the third public key (PU3) is that the security gate is received from the mobile device After the first synchronization request is generated, the security gate generates a third private key (PR3), and the security gate returns the third public key (PU3) and the first security gate identification code to the mobile device. . The method for preservation according to claim 25, further comprising: if the public key is updated successfully, returning a first synchronization success message to the mobile device; wherein the security gate is received from the mobile device The second synchronization success message, the security gate updates the first private key (PR1) to the third private key (PR3). The method for preservation according to claim 23, further comprising: returning an authorization time to the mobile device to provide the security gate to confirm whether the authorization time is currently within the authorization time. A server comprising: a server communication unit configured to transmit a received message between the server and a mobile device; a server control unit configured to: receive a security gate identification message, a first security gate identification code, and a mobile device identification code from the mobile device; decrypt the security gate identification message, Extracting a first security gate number; and comparing the mobile device identification code with a permission data, if successful, the encryption operation generates an authorization code, and returns the authorization code and the first security gate identification code to the mobile device; The first security gate digital number is generated by the security gate receiving an authentication request transmitted from the mobile device, and encrypting the first security gate digital to generate the security gate identification message, and the security gate returns the security a gate identification message and the first security gate identification code to the mobile device; and when the security gate receives the authorization code transmitted by the mobile device and the first security gate identification code, decrypting the authorization code to Obtaining the first security gate number, comparing the first security gate identification code returned from the mobile device with the first security gate identification code originally stored in the security gate Adhesion obtained with the first digital gate to preserve the original stored in the first digital gate to preserve the gate of preservation for verification, if the request is approved by the authentication correctly. The server according to claim 28, wherein the server control unit is further configured to: Decrypting the security gate identification message using a first public key (PU1), taking out the first security gate number and a second public key (PU2); and comparing the mobile device identification code with the rights information, such as Successfully encrypting the first security key using the second public key (PU2) to generate the authorization code, and updating the first public key (PU1) to the second public key (PU2); wherein The first security gate digital and the second public key (PU2) are generated by the security gate receiving the authentication request transmitted by the mobile device, and encrypting the first security gate digital number using a first private key (PR1) And the second public key (PU2) to generate the security gate identification message; the security gate receives the authorization code transmitted by the mobile device and the first security gate identification code, and uses the second private key (PR2) Decrypting the authorization code to obtain the first security gate number, comparing the first security gate identification code returned from the mobile device with the first security gate identification code originally stored in the security gate Comparing the first secured gate digital obtained by decryption and the original preservation in the security The first gate of digital preservation, such as the preservation of the right brake approve the authentication request and the first private key (PR1) update is the second private key (PR2). For example, in the server described in claim 28, the server communication unit includes: a communication unit conforming to specifications such as WIFI, 3G, 3.5G, 4G, LTE or WIMAX. The server of claim 28, wherein the server control unit comprises a processing unit for reading at least one or more memory modules A readable code to complete the functions implemented by the server control unit. The server of claim 28, wherein the server controller control unit is implemented by at least one integrated circuit.