WO2016201733A1

WO2016201733A1 - Security verification method, security verification device and security verification system

Info

Publication number: WO2016201733A1
Application number: PCT/CN2015/082934
Authority: WO
Inventors: 吴坤灵; 陈�峰
Original assignee: 宇龙计算机通信科技(深圳)有限公司
Priority date: 2015-06-16
Filing date: 2015-06-30
Publication date: 2016-12-22
Also published as: CN105635094B; CN105635094A

Abstract

Provided are a security verification method, a security verification device and a security verification system. The security verification method for a server comprises: establishing a first communication link with a mobile terminal; receiving request information from the mobile terminal via the first communication link; verifying whether the request information matches pre-stored verification information in the server; and if a verification result is yes, allocating administrator rights of a smart home device in a communication connection with the server to the mobile terminal. By means of the technical solutions of the present invention, targeted security verification can be performed by using the features of a smart home network, an illegal operation performed on a smart home device due to fixed password leakage can be effectively avoided, and the security of a smart home network is improved, thereby improving the user experience.

Description

Security verification method, security verification device and security verification system

This application claims priority to Chinese Patent Application No. 201510334319.2, entitled "Safety Verification Method, Security Verification Device, and Security Verification System", which is filed on June 16, 2015, the entire contents of which are incorporated by reference. In this application.

Technical field

The present invention relates to the field of information verification technologies, and in particular, to a security verification method for a server, a security verification device for a server, a security verification method for a mobile terminal, and a mobile terminal. Security verification device and a security verification system.

Background technique

At present, there is no secure encryption scheme for smart home networks. The encryption and decryption methods used on smart home networks are traditional network encryption and decryption methods, such as symmetric encryption, asymmetric encryption, and one-way encryption. However, existing encryption schemes have at least the following drawbacks:

First, the targeting is not strong, using traditional encryption methods to encrypt the smart home network, does not take into account the characteristics of the smart home network, can not be effective and targeted encryption and decryption.

Second, the key or password is fixed. The current encryption methods are basically encrypted by encrypting data or encrypting communication lines. These keys or passwords are fixed. As long as they are transmitted, they may be intercepted by hackers. The security is not high.

Therefore, how to effectively avoid the illegal operation of the smart home device caused by the leakage of the fixed password and improve the security of the smart home network, thereby improving the user experience has become a technical problem to be solved urgently.

Summary of the invention

The invention is based on the above problems, and proposes a new technical solution, which can effectively avoid the illegal operation of the smart home device due to the leakage of the fixed password, improve the security of the smart home network, thereby improving the user experience.

In view of this, an aspect of the present invention provides a security verification method for a server, including: establishing a first communication link with a mobile terminal; receiving, by the first communication link, the mobile terminal Request information; verifying whether the request information matches the pre-stored verification information in the server; and when the verification result is yes, assigning the mobile terminal to establish a communication connection with the server Administrator rights for smart home devices.

In this technical solution, when the request information from the mobile terminal is received through the first communication link with the mobile terminal, whether the verification request information matches the pre-stored verification information in the server, and if it matches, the mobile terminal is Assigning administrator rights to the smart home device that establishes a communication connection with the server, that is, allowing the user to access and/or control the smart home device through the mobile terminal, otherwise rejecting, thus being able to utilize the characteristics of the smart home network for targeted security Verification can effectively avoid the illegal operation of smart home devices caused by the leakage of fixed passwords, so as to improve the security of the smart home network, thereby improving the user experience.

In the above technical solution, preferably, before the step of establishing the first communication link with the mobile terminal, further comprising: establishing a local area network with the mobile terminal; and synchronizing storage through the local area network Verification information from the mobile terminal to obtain the pre-stored verification information; recording a synchronization time, and feeding back the synchronization time to the mobile terminal, for the mobile terminal to generate the request information according to the synchronization time And verifying whether the request information matches the pre-stored verification information, specifically: performing decryption processing on the request information to obtain target verification information; and determining whether the target verification information matches the pre-stored verification information.

In this technical solution, before establishing the first communication link with the mobile terminal, it is also required to establish a local area network with the mobile terminal to synchronously store the verification information from the mobile terminal, and obtain pre-stored verification information, so that it can be effective. To avoid the illegal operation of the smart home device due to the leakage of the verification information, and to provide the necessary premise guarantee for the mobile terminal to generate the request information that can be matched with the pre-stored verification information by feeding back the recorded synchronization time to the mobile terminal, effectively avoiding Error verification; and, by decrypting the request information to obtain target verification information that can be matched with the pre-stored verification information in the server, double verification is provided to further improve the security of the smart home network, thereby improving the user experience.

In the above technical solution, preferably, the request information and the pre-stored verification information comprise: one or more of contact information stored in the mobile terminal; and establishing and moving by using a WIFI or a mobile data network The first communication link of the terminal.

In the technical solution, the request information and the pre-stored verification information may be one or more of the contact information stored in the mobile terminal, that is, each request information is random and not fixed, and each information matching is also random. It is not fixed to solve the illegal operation of the smart home device caused by the leakage of the fixed password, that is, even if the hacker intercepts and cracks the transmitted request information, it cannot be forged. That is to say, the security verification information will not be exposed, and the security of the smart home network is improved, thereby improving the user experience.

In addition, the first communication link between the server and the mobile terminal can be established through WIFI or through a mobile data network. Of course, it can also be established through other suitable data transmission forms. WIFI and mobile data networks are relatively common data. The transmission method is convenient and fast, and there is no need to additionally increase the cost of the smart home network.

Another aspect of the present invention provides a security verification apparatus for a server, including: a first creation unit, configured to establish a first communication link with a mobile terminal; and a transceiver unit configured to pass the first The communication link receives the request information from the mobile terminal; the verification unit is configured to verify whether the request information matches the pre-stored verification information in the server; and the configuration unit is configured to: when the verification result is yes, The mobile terminal assigns administrator rights to the smart home device that establishes a communication connection with the server.

In the above technical solution, preferably, the method further includes: a second creating unit, configured to establish a local area network with the mobile terminal before establishing the first communication link with the mobile terminal; And the verification information from the mobile terminal is synchronously stored by the local area network to obtain the pre-stored verification information; the recording unit is configured to record a synchronization time; the transceiver unit is further configured to: use the synchronization time feedback To the mobile terminal; and the verification unit specifically includes: a decryption unit, configured to perform decryption processing on the request information to obtain target verification information; and a determining unit, configured to determine whether the target verification information is pre-stored Verify that the information matches.

In this technical solution, before establishing the first communication link with the mobile terminal, it is also required to establish a local area network with the mobile terminal to synchronously store the verification information from the mobile terminal, and obtain pre-stored verification information, so that it can be effective. Avoid illegal operation of smart home devices due to leakage of verification information, and generate feedback for mobile terminals by feeding back the recorded synchronization time to the mobile terminal. The request information matching the verification information provides the necessary premise guarantee, and the error verification is effectively avoided; and the double verification is provided by decrypting the request information to obtain the target verification information that can be matched with the pre-stored verification information in the server. To further enhance the security of the smart home network, thereby enhancing the user experience.

In the technical solution, the request information and the pre-stored verification information may be one or more of the contact information stored in the mobile terminal, that is, each request information is random and not fixed, and each information matching is also random. It is not fixed to solve the illegal operation of the smart home device caused by the leakage of the fixed password. That is to say, even if the hacker intercepts and cracks the transmitted request information, it cannot be forged, that is, the security verification information will not be exposed. Improve the security of the smart home network and enhance the user experience.

Yet another aspect of the present invention provides a security verification method for a mobile terminal, comprising: establishing a second communication link with a server; receiving a synchronization time from the server over the second communication link; Acquiring at least one verification information stored in the mobile terminal according to the synchronization time; performing encryption processing on the at least one verification information to obtain request information; and transmitting the request information to the location by using the second communication link Determining, by the server, the identity legality verification of the mobile terminal by the server, and after the verification is passed, receiving an administrator authority from the server to establish a communication connection with the server.

In this technical solution, the synchronization time from the server is received through a second communication link established with the server, and then at least one verification information stored in the mobile terminal is acquired according to the synchronization time, and the obtained verification information is encrypted. In order to obtain the request information, the security protection is further improved. At least one verification information is randomly selected, that is, each request information is random and not fixed, and each information matching is also randomly fixed to solve the problem. A fixed password leak leads to illegal operation of the smart home device, that is, even if the hacker intercepts and cracks the transmitted request information, It is impossible to forge, that is, the security verification information is not exposed, and the security of the smart home network is improved. Finally, the request information is sent to the server through the second communication link, so that the server can verify the identity of the mobile terminal, if the verification is passed. The mobile terminal is assigned an administrator right to the smart home device that establishes a communication connection with the server, that is, the user is allowed to access and/or control the smart home device through the mobile terminal, otherwise refused, and thus, the characteristics of the smart home network can be utilized. Targeted security verification can effectively avoid the illegal operation of smart home devices caused by the leakage of fixed passwords, so as to improve the security of the smart home network, thereby improving the user experience.

In the above technical solution, preferably, before the step of establishing the second communication link with the server, the method further includes: connecting to a local area network established by the server; sending designated verification information to the The server performs synchronous storage for the server to perform identity legality verification on the mobile terminal; and the request information, the at least one verification information, and the specified verification information includes: a contact stored in the mobile terminal One or more of the information; and establishing the second communication link with the server via a WIFI or mobile data network.

In this technical solution, before establishing the second communication link with the server, it is required to connect to the local area network established by the server, for synchronously storing the specified verification information from the mobile terminal, for the server to verify the identity of the mobile terminal. In this way, illegal operation of the smart home device due to leakage of the verification information can be effectively avoided.

The request information, the at least one verification information, and the specified verification information may be one or more of the contact information stored in the mobile terminal, that is, each time the verification information is randomly generated by the system, each of which is not fixed. The secondary information matching is also random and not fixed, so as to solve the illegal operation of the smart home device caused by the leakage of the fixed password, that is, even if the hacker intercepts and cracks the transmitted request information, it cannot be forged, that is, The security verification information will not be exposed, and the smart home network security will be improved, thereby improving the user experience.

In addition, the second communication link between the mobile terminal and the server may be established through WIFI, or may be established through a mobile data network, and may also be established through other suitable data transmission forms. WIFI and mobile data networks are relatively common data. The transmission method is convenient and fast, and there is no need to additionally increase the cost of the smart home network.

A further aspect of the present invention provides a security verification apparatus, for a mobile terminal, comprising: a third creation unit, configured to establish a second communication link with a server; and a transceiver unit, configured to pass the second a communication link receives a synchronization time from the server; an acquisition unit for synchronizing according to the synchronization Acquiring at least one verification information stored in the mobile terminal; an encryption unit configured to perform encryption processing on the at least one verification information to obtain request information; and the transceiver unit is further configured to: pass the second communication The link sends the request information to the server for the server to perform identity legality verification on the mobile terminal, and after the verification is passed, for receiving a communication from the server to establish communication with the server Administrator privileges for connected smart home devices.

In this technical solution, the synchronization time from the server is received through a second communication link established with the server, and then at least one verification information stored in the mobile terminal is acquired according to the synchronization time, and the obtained verification information is encrypted. In order to obtain the request information, the security protection is further improved. At least one verification information is randomly selected, that is, each request information is random and not fixed, and each information matching is also randomly fixed to solve the problem. A fixed password leak leads to illegal operation of the smart home device, that is, even if the hacker intercepts and cracks the transmitted request information, it cannot be forged, that is, the security verification information is not exposed, and the smart home network security is improved. Finally, the request information is sent to the server through the second communication link, so that the server performs identity legality verification on the mobile terminal, and if the verification passes, the mobile terminal is assigned administrator rights to the smart home device that establishes a communication connection with the server. , allowing users to access through mobile terminals / or control smart home devices, otherwise refused, so, can use the characteristics of smart home network for targeted security verification, can effectively avoid the illegal operation of smart home devices caused by the leakage of fixed passwords, to improve the smart home network Security to enhance the user experience.

In the above technical solution, preferably, the method further includes: a connecting unit, configured to connect to a local area network established by the server before establishing the second communication link with the server; and a synchronization unit, configured to: Sending the specified verification information to the server for synchronous storage for the server to perform identity legality verification on the mobile terminal; and the request information, the at least one verification information, and the specified verification information include: Determining one or more of the contact information stored in the mobile terminal; and establishing the second communication link with the server via a WIFI or mobile data network.

The request information, the at least one verification information, and the specified verification information may be stored in the mobile terminal. One or more of the stored contact information, that is, each time the verification information is randomly generated by the system, and each time the information is matched, it is random and not fixed, so as to solve the leakage due to the fixed password. As a result, the illegal operation of the smart home device, that is, even if the hacker intercepts and cracks the transmitted request information, it cannot be forged, that is, the security verification information is not exposed, and the security of the smart home network is improved, thereby improving user experience.

Still another aspect of the present invention provides a security verification system including a security verification device and a security verification device, wherein:

The security verification device is configured to establish a first communication link with the mobile terminal; receive request information from the mobile terminal by using the first communication link; and verify whether the request information is in the server The pre-stored verification information is matched; when the verification result is YES, the mobile terminal is assigned an administrator authority to the smart home device that establishes a communication connection with the server;

The security verification device is configured to establish a second communication link with the server; receive, by the second communication link, a synchronization time from the server; and acquire, according to the synchronization time, the storage in the mobile terminal At least one verification information; performing encryption processing on the at least one verification information to obtain request information; transmitting the request information to the server through the second communication link, for the server to the mobile terminal The identity legality verification is performed, and after the verification is passed, the administrator authority from the server to the smart home device establishing a communication connection with the server is received.

In the technical solution, before the step of establishing the first communication link with the mobile terminal by the security verification device, the method further includes:

Establishing a local area network with the mobile terminal;

Synchronizing storage of verification information from the mobile terminal through the local area network to obtain the pre-stored verification information;

Recording a synchronization time and feeding back the synchronization time to the mobile terminal for the mobile terminal to generate the request information according to the synchronization time;

The security verification device verifies whether the request information matches the pre-stored verification information, specifically include:

Decrypting the request information to obtain target verification information;

Determining whether the target verification information matches the pre-stored verification information.

In the technical solution, the request information and the pre-stored verification information comprise: one or more of contact information stored in the mobile terminal;

The first communication link with the mobile terminal is established over a WIFI or mobile data network.

In the technical solution, before the step of establishing the second communication link with the server, the security verification device is further configured to:

Connected to a local area network established by the server;

Sending specified authentication information to the server for synchronous storage for the server to perform identity legality verification on the mobile terminal;

The request information, the at least one verification information, and the specified verification information include one or more of contact information stored in the mobile terminal;

The second communication link with the server is established over a WIFI or mobile data network.

Through the technical solution of the present invention, the targeted security verification can be performed by utilizing the characteristics of the smart home network, which can effectively avoid the illegal operation of the smart home device caused by the leakage of the fixed password, thereby improving the security of the smart home network, thereby Improved user experience.

DRAWINGS

1 is a flow chart showing a method of security verification according to an embodiment of the present invention;

2 shows a block diagram of a security verification device in accordance with one embodiment of the present invention;

FIG. 3 is a flow chart showing a security verification method according to another embodiment of the present invention; FIG.

Figure 4 shows a block diagram of a security verification device in accordance with another embodiment of the present invention;

Figure 5 shows a block diagram of a security verification system in accordance with one embodiment of the present invention;

FIG. 6 is a block diagram showing the structure of a smart home network according to an embodiment of the present invention; FIG.

FIG. 7 is a block diagram showing a smart home network security encryption system according to an embodiment of the present invention; FIG.

FIG. 8 is a flow chart showing a security verification method according to another embodiment of the present invention.

detailed description

The above described objects, features and advantages of the present invention will become more apparent from the detailed description of the appended claims. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

In the following description, numerous specific details are set forth in order to provide a full understanding of the invention, but the invention may be practiced otherwise than as described herein. Limitations of the embodiments.

FIG. 1 shows a flow chart of a security verification method according to an embodiment of the present invention.

As shown in FIG. 1, a security verification method according to an embodiment of the present invention is used for a server, including: Step 102, establishing a first communication link with a mobile terminal; Step 104, passing the first communication link Receiving request information from the mobile terminal; step 106, verifying whether the request information matches the pre-stored verification information in the server; and step 108, when the verification result is yes, assigning the pair to the mobile terminal The server establishes administrator rights for the smart home device that communicates with the connection.

In the above technical solution, preferably, before the step 102, the method further includes: establishing a local area network with the mobile terminal; and synchronously storing verification information from the mobile terminal by using the local area network to obtain Pre-storing verification information; recording synchronization time, and feeding back the synchronization time to the mobile terminal, for the mobile terminal to generate the request information according to the synchronization time; and verifying whether the request information is pre-stored The verification information matching includes: decrypting the request information to obtain target verification information; and determining whether the target verification information matches the pre-stored verification information.

2 shows a block diagram of a security verification device in accordance with one embodiment of the present invention.

As shown in FIG. 2, the security verification apparatus 200 of an embodiment of the present invention is used for a server, including: a first creation unit 202, configured to establish a first communication link with a mobile terminal; and a transceiver unit 204. Receiving request information from the mobile terminal through the first communication link; the verification unit 206 is configured to verify whether the request information matches the pre-stored verification information in the server; and the configuration unit 208 is configured to perform verification When the result is YES, the mobile terminal is assigned an administrator authority to the smart home device that establishes a communication connection with the server.

In this technical solution, when the request information from the mobile terminal is received through the first communication link with the mobile terminal, whether the verification request information matches the pre-stored verification information in the server, and if it matches, the mobile terminal is Assigning administrator rights to the smart home device that establishes a communication connection with the server, that is, allowing the user to access and/or control the smart home device through the mobile terminal, otherwise rejecting, thus being able to utilize the characteristics of the smart home network for targeted security Verification, can effectively avoid the illegal operation of smart home devices caused by the leakage of fixed passwords, to improve the smart home network Security to enhance the user experience.

In the above technical solution, preferably, the method further includes: a second creating unit 210, configured to establish a local area network with the mobile terminal before establishing the first communication link with the mobile terminal; The unit 212 is configured to synchronously store the verification information from the mobile terminal by using the local area network to obtain the pre-stored verification information, and the recording unit 214 is configured to record the synchronization time. The transceiver unit 204 is further configured to: The synchronization time is fed back to the mobile terminal; and the verification unit 206 specifically includes: a decryption unit 2062, configured to perform decryption processing on the request information to obtain target verification information; and a determining unit 2064, configured to determine the target Verify that the information matches the pre-stored verification information.

FIG. 3 is a flow chart showing a security verification method according to another embodiment of the present invention.

As shown in FIG. 3, a security verification method according to another embodiment of the present invention, for a mobile terminal, includes: Step 302, establishing a second communication link with a server; Step 304, by the second communication The link receives the synchronization time from the server; step 306, acquiring at least one verification information stored in the mobile terminal according to the synchronization time; and step 308, performing encryption processing on the at least one verification information to obtain the request information. Step 310, sending the request information to the server through the second communication link, for the server to perform identity legality verification on the mobile terminal, and after the verification is passed, receiving from the server The administrator rights to the smart home device that establishes a communication connection with the server.

In the above technical solution, preferably, before the step 302, the method further includes: connecting to a local area network established by the server; sending specified authentication information to the server for synchronous storage, for the server to The mobile terminal performs identity legality verification; and the request information, the at least one verification information, and the specified verification information include: one or more of contact information stored in the mobile terminal; and through WIFI or mobile The data network establishes the second communication link with the server.

In this technical solution, before establishing a second communication link with the server, it is required to connect to a local area network established by the server for synchronously storing specified verification information from the mobile terminal for the server. The identity legality verification of the mobile terminal can effectively avoid the illegal operation of the smart home device due to the leakage of the verification information.

4 shows a block diagram of a security verification device in accordance with another embodiment of the present invention.

As shown in FIG. 4, the security verification apparatus 400 according to an embodiment of the present invention is used for a mobile terminal, including: a third creation unit 402, configured to establish a second communication link with a server; and a transceiver unit 404, And a receiving unit 406, configured to acquire, according to the synchronization time, at least one verification information stored in the mobile terminal, and an encryption unit 408, configured to The at least one verification information is subjected to an encryption process to obtain request information; and the transceiver unit 404 is further configured to: send the request information to the server by using the second communication link, for the server pair The mobile terminal performs identity legality verification and, after the verification is passed, is configured to receive an administrator authority from the server to a smart home device that establishes a communication connection with the server.

In this technical solution, the synchronization time from the server is received through a second communication link established with the server, and then at least one verification information stored in the mobile terminal is acquired according to the synchronization time, and the obtained verification information is encrypted. In order to obtain the request information, the security protection is further improved. At least one verification information is randomly selected, that is, each request information is random and not fixed, and each information matching is also randomly fixed to solve the problem. A fixed password leak leads to illegal operation of the smart home device, that is, even if the hacker intercepts and cracks the transmitted request information, it cannot be forged, that is, the security verification information is not exposed, and the smart home network security is improved. Finally, the request information is sent to the server through the second communication link, so that the server can perform the mobile terminal Identity legality verification, if the verification is passed, assigning the mobile terminal an administrator authority to the smart home device that establishes a communication connection with the server, that is, allowing the user to access and/or control the smart home device through the mobile terminal, otherwise rejecting, It can utilize the characteristics of the smart home network to carry out targeted security verification, which can effectively avoid the illegal operation of smart home devices caused by the leakage of fixed passwords, so as to improve the security of the smart home network, thereby improving the user experience.

In the above technical solution, preferably, the method further includes: a connecting unit 410, configured to connect to a local area network established by the server before establishing the second communication link with the server; and a synchronization unit 412, And configured to send the specified verification information to the server for synchronous storage, where the server performs identity legality verification on the mobile terminal; and the request information, the at least one verification information, and the specified verification information includes : one or more of the contact information stored in the mobile terminal; and establishing the second communication link with the server via a WIFI or mobile data network.

Figure 5 shows a block diagram of a security verification system in accordance with one embodiment of the present invention.

As shown in FIG. 5, the security verification system 500 of one embodiment of the present invention includes the security verification device 200 for a server according to any one of the above aspects, and the use of any one of the foregoing technical solutions. The security verification device 400 of the mobile terminal, therefore, the security verification system has and The same technical effects of the security verification apparatus for the server and the security verification apparatus for the mobile terminal described in any of the above aspects are not described herein again.

The technical solutions of some specific embodiments of the present invention are described in detail below with reference to FIG. 6 to FIG. 8.

FIG. 6 shows a block diagram of a smart home network in accordance with one embodiment of the present invention.

Figure 7 shows a block diagram of a smart home network security encryption system in accordance with one embodiment of the present invention.

As shown in FIG. 6 , in a smart home network according to an embodiment of the present invention, the security encryption system of the smart home network is composed of five modules, as shown in FIG. 7 : a home smart device (ie, a smart home device), a smart home network. A cloud, a password verification module (ie, a verification unit), a password generation module (ie, an encryption unit), and a mobile terminal. The functions of each module in the system and their interactions are as follows:

Among them, the home smart device includes all devices connected to the smart home network cloud (ie, the server) in the user's home, such as a camera, a television, a light bulb, a socket, a refrigerator, a curtain, a washing machine, and the like. The smart home network cloud is a resource platform provided to the user's local area network or remote access. These resources are all from the home smart device, providing users with access resources, and also managing the intelligent terminal contact information synchronized by the user under the local area network (ie, pre-stored verification). Information) and information such as synchronization time. When the user needs to remotely access the home smart device, the mobile terminal is used to generate a password (ie, request information) of the random contact through the password generation module according to the time of the latest update of the contact in the family cloud, and the information is transmitted to the smart home network. The cloud, the smart home network cloud will match the received information through the password verification module with the previously backed up user contact information (ie, pre-stored verification information). If the matching is successful, the user is allowed to perform corresponding operations, if the matching is unsuccessful , the user is denied access.

As shown in FIG. 8, the flow chart of the technical solution of the present invention is in actual use, and the steps are as follows:

In step 802, the user opens the terminal, taking an example of a male family owner. When the male owner works at the company, he suddenly thinks that the air conditioner in the home is not closed. First, he will pick up the mobile phone (ie mobile terminal) that he carries with him and open the smart home platform application.

In step 804, the mobile terminal automatically acquires several contact information and transmits it to the server. At this time, the mobile terminal randomly reads three contact information, that is, verification information, from the male owner's contact, and the selected information is selected among the contact information that the male owner recently synchronizes to the smart home network cloud through the local area network to ensure that the information is selected. All three contact information read should be on the server.

Step 806: The server performs the information with the backed up contact information (ie, preset verification information). match. After the server obtains the three contact information, it matches the preset verification information.

Step 808, the backup contact information is derived from the backup of the user through the local area network, that is, the preset verification information.

In step 810, it is determined whether the matching is successful. If the matching is successful, the process proceeds to step 812; otherwise, the process proceeds to step 814.

Step 812, allowing the user to access and control the devices in the smart home network, that is, allowing the male owner to perform the operation of turning off the air conditioner.

In step 814, if the matching is unsuccessful, that is, if someone impersonates, the corresponding operation is rejected.

The technical solution of the present invention is described in detail above with reference to the accompanying drawings.

It can utilize the characteristics of the smart home network to carry out targeted security verification, which can effectively avoid the illegal operation of smart home devices caused by the leakage of fixed passwords, improve the security of the smart home network, and thus improve the user experience.

The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Claims

A security verification method for a server, comprising:

Establishing a first communication link with the mobile terminal;

Receiving request information from the mobile terminal through the first communication link;

Verifying whether the request information matches the pre-stored verification information in the server;

When the verification result is YES, the mobile terminal is assigned an administrator authority to the smart home device that establishes a communication connection with the server.
The security verification method according to claim 1, wherein before the step of establishing the first communication link with the mobile terminal, the method further comprises:

Establishing a local area network with the mobile terminal;

Synchronizing storage of verification information from the mobile terminal through the local area network to obtain the pre-stored verification information;

Recording a synchronization time and feeding back the synchronization time to the mobile terminal for the mobile terminal to generate the request information according to the synchronization time;

And verifying whether the request information matches the pre-stored verification information, specifically:

Decrypting the request information to obtain target verification information;

Determining whether the target verification information matches the pre-stored verification information.
A security verification method according to claim 1 or 2, characterized in that

The request information and the pre-stored verification information include: one or more of contact information stored in the mobile terminal;

The first communication link with the mobile terminal is established over a WIFI or mobile data network.
A security verification device for a server, comprising:

a first creating unit, configured to establish a first communication link with the mobile terminal;

a transceiver unit, configured to receive request information from the mobile terminal by using the first communication link;

a verification unit, configured to verify whether the request information matches the pre-stored verification information in the server;

And a configuration unit, configured to: when the verification result is yes, assign the administrator terminal authority to the smart home device that establishes a communication connection with the server.
The security verification device according to claim 5, further comprising:

a second creating unit, configured to establish a local area network with the mobile terminal before establishing the first communication link with the mobile terminal;

a storage unit, configured to synchronously store verification information from the mobile terminal by using the local area network to obtain the pre-stored verification information;

a recording unit for recording a synchronization time;

The transceiver unit is further configured to: feed back the synchronization time to the mobile terminal, where the mobile terminal generates the request information according to the synchronization time;

The verification unit specifically includes:

a decryption unit, configured to perform decryption processing on the request information to obtain target verification information;

The determining unit is configured to determine whether the target verification information matches the pre-stored verification information.
The security verification apparatus according to claim 4 or 5, wherein the request information and the pre-stored verification information comprise one or more of contact information stored in the mobile terminal;

The first communication link with the mobile terminal is established over a WIFI or mobile data network.
A security verification method for a mobile terminal, comprising:

Establishing a second communication link with the server;

Receiving a synchronization time from the server over the second communication link;

Acquiring at least one verification information stored in the mobile terminal according to the synchronization time;

Encrypting the at least one verification information to obtain request information;

Sending the request information to the server through the second communication link, for the server to perform identity legality verification on the mobile terminal, and after the verification is passed, receiving a pair from the server The server establishes administrator rights for the smart home device that communicates with the connection.
The security verification method according to claim 7, wherein before the step of establishing the second communication link with the server, the method further comprises:

Connected to a local area network established by the server;

Sending specified authentication information to the server for synchronous storage for the server to perform identity legality verification on the mobile terminal;

The request information, the at least one verification information, and the specified verification information include one or more of contact information stored in the mobile terminal;

The second communication link with the server is established over a WIFI or mobile data network.
A security verification device for a mobile terminal, comprising:

a third creating unit, configured to establish a second communication link with the server;

a transceiver unit, configured to receive a synchronization time from the server by using the second communication link;

An obtaining unit, configured to acquire, according to the synchronization time, at least one verification information stored in the mobile terminal;

An encryption unit, configured to perform encryption processing on the at least one verification information to obtain request information;

The transceiver unit is further configured to: send the request information to the server by using the second communication link, for the server to perform identity legality verification on the mobile terminal, and after the verification is passed, use Receiving administrator rights from the server to a smart home device that establishes a communication connection with the server.
The security verification device according to claim 9, further comprising:

a connecting unit, configured to connect to a local area network established by the server before establishing the second communication link with the server;

a synchronization unit, configured to send the specified verification information to the server for synchronous storage, for the server to perform identity legality verification on the mobile terminal;

The request information, the at least one verification information, and the specified verification information include one or more of contact information stored in the mobile terminal;

The second communication link with the server is established over a WIFI or mobile data network.
A security verification system, comprising: a security verification device and a security verification device, wherein:

The security verification device is configured to establish a first communication link with the mobile terminal; receive request information from the mobile terminal by using the first communication link; and verify whether the request information is in the server The pre-stored verification information is matched; when the verification result is YES, the mobile terminal is assigned an administrator authority to the smart home device that establishes a communication connection with the server;

The security verification device is configured to establish a second communication link with the server; receive, by the second communication link, a synchronization time from the server; and acquire, according to the synchronization time, the storage in the mobile terminal At least one verification information; performing encryption processing on the at least one verification information to obtain request information; transmitting the request information to the server through the second communication link, And the server performs identity legality verification on the mobile terminal, and after the verification is passed, receives an administrator authority from the server to establish a communication connection with the server.
The security verification system according to claim 11, wherein before the step of establishing the first communication link with the mobile terminal, the security verification device is further configured to:

Establishing a local area network with the mobile terminal;

Synchronizing storage of verification information from the mobile terminal through the local area network to obtain the pre-stored verification information;

Recording a synchronization time and feeding back the synchronization time to the mobile terminal for the mobile terminal to generate the request information according to the synchronization time;

The security verification device verifies whether the request information matches the pre-stored verification information, and specifically includes:

Decrypting the request information to obtain target verification information;

Determining whether the target verification information matches the pre-stored verification information.
The security verification system according to claim 11 or 12, wherein the request information and the pre-stored verification information comprise: one or more of contact information stored in the mobile terminal;

The first communication link with the mobile terminal is established over a WIFI or mobile data network.
The security verification system according to claim 11, wherein the security verification device is further configured to: before the step of establishing the second communication link with the server:

Connected to a local area network established by the server;

Sending specified authentication information to the server for synchronous storage for the server to perform identity legality verification on the mobile terminal;

The request information, the at least one verification information, and the specified verification information include one or more of contact information stored in the mobile terminal;

The second communication link with the server is established over a WIFI or mobile data network.