WO2017219759A1

WO2017219759A1 - User check-in method and system

Info

Publication number: WO2017219759A1
Application number: PCT/CN2017/082364
Authority: WO
Inventors: 李培冀
Original assignee: 深圳市海月通信技术有限公司
Priority date: 2016-06-23
Filing date: 2017-04-28
Publication date: 2017-12-28

Abstract

Disclosed in the present invention are a user check-in method and system. The method comprises: allocate a terminal device capable of signing an electronic signature by oneself and performing wireless transmission, to a location into which a user needs to checks, and after the terminal device generates authentication information, the terminal device wirelessly sends the authentication information to a client carried by the user, and the client sends the authentication information to a sever, the authentication information comprising a first dynamic electronic signature and identifier information of the terminal device; the server obtains a pre-stored second key corresponding to the terminal device according to the authentication information, and obtains, by means of a preset encryption algorithm, a second dynamic electronic signature according to the second key and a second dynamic parameter; and the server also authenticates the first dynamic electronic signature according to the second dynamic electronic signature, and after the authentication is passed, the server determines the user successfully checks in. Also disclosed is a user check-in system. By means of the present invention, the authenticity of check-ins of users can be improved.

Description

Method and system for user sign-in

Technical field

The present application relates to the field of personnel management, and in particular, to a method and system for user sign-in.

Background technique

Now, when the patrolman arrives at the patrol destination, in order to prove the arrival of the destination and complete the task, the arrival and completion of the task is generally proved by signing the book placed on the destination, but this method is easy to cause management omission. The administrator cannot fully confirm the authenticity of the user's signature and check-in time.

Summary of the invention

In view of this, the present application provides a method and system for user sign-in, which can improve the authenticity of the user's sign-in.

Specifically, the present application is implemented by the following technical solutions:

An embodiment of the present invention provides a method for a user to check in, including:

A terminal device having a self-dynamic signature and a wireless communication capability is allocated to a location that the user needs to check in. After the user terminal device generates the authentication information, the terminal device sends the authentication information to the client carried by the user by using a wireless manner, and the client passes the Sending the authentication information to the server in a wireless manner, where the authentication information includes the first dynamic electronic signature and the identification information of the terminal device;

And the server obtains a second key corresponding to the terminal device that is stored in advance according to the identifier information, and obtains a second dynamic electronic signature by using the preset encryption algorithm according to the second key and the second dynamic parameter;

The server further authenticates the first dynamic electronic signature according to the second dynamic electronic signature, and after the authentication is passed, determines that the user is successfully checked in.

In the foregoing solution, the terminal device of the user generates the authentication information, where the terminal device performs a self-signature operation on the first dynamic parameter as the signature parameter and the preset first key according to the cryptographic algorithm to obtain a group of authentications. Information, wirelessly sending signature information and device information.

In the above solution, the first dynamic electronic signature is obtained by the terminal device of the user, where the first dynamic electronic signature is obtained by the terminal device according to the first dynamic parameter and the first key by using a preset encryption algorithm; Or the first dynamic electronic signature is obtained by using a preset encryption algorithm according to the first dynamic parameter and the first key acquired from the client; or the first dynamic electronic signature is obtained according to the obtained from the client. The first dynamic parameter and the locally obtained first key are obtained by a preset encryption algorithm.

In the above solution, the authentication information further includes the first dynamic parameter and the second dynamic parameter; the first dynamic parameter and the second dynamic parameter include one or more of a time, a challenge code, or an event, The value of the second dynamic parameter is equal to the value of the first dynamic parameter or the value calculated according to the first dynamic parameter.

In the above solution, when the first dynamic parameter and the second dynamic parameter are time, the obtaining, by using the second key and the second dynamic parameter, the second dynamic electronic signature by using the preset encryption algorithm includes: :

Determining a preset time period based on the local time of the server;

And the dynamic electronic signature group is obtained by using the preset encryption algorithm according to the second dynamic parameter and the second key according to the preset time interval, where the dynamic electronic signature group includes multiple Second dynamic electronic signature;

The server authenticates the first dynamic electronic signature according to the second dynamic electronic signature. After the authentication is passed, determining that the user successfully signs in the check includes:

Determining whether there is a second dynamic electronic signature identical to the first dynamic electronic signature in the dynamic electronic signature group, and determining that the user is checked in when there is a second dynamic electronic signature identical to the first dynamic electronic signature success.

In the above solution, when the first dynamic parameter and the second dynamic parameter are time, the authentication information further includes a local time of the terminal device or a local time of the client;

When the authentication information includes the local time of the terminal device, the obtaining, by the preset encryption algorithm, the second dynamic electronic signature according to the second key and the second dynamic parameter includes: the server receiving the The local time of the terminal device sent by the client, and obtaining the second dynamic electronic signature by using the preset encryption algorithm according to the second key and the local time of the terminal device;

When the authentication information includes the local time of the client, the obtaining the second dynamic electronic signature by using the preset encryption algorithm according to the second key and the second dynamic parameter includes: the server receiving the client sending The local time of the client, and obtaining a second dynamic electronic signature by using the preset encryption algorithm according to the second key and the local time of the client and the second dynamic parameter;

Determining whether the first dynamic electronic signature is the same as the second dynamic electronic signature, and determining that the user sign-in is successful when the first dynamic electronic signature is the same as the second dynamic electronic signature.

In the above solution, the method further includes performing a self-signature operation on the first dynamic parameter, the first key, and the terminal device identification information, which are signature parameters, according to a cryptographic algorithm, to obtain a set of authentication information.

In the foregoing solution, the client sends the authentication information in a wireless manner, where the client periodically broadcasts the terminal device identification information and the authentication information by using a wireless manner, or sends the query when the client receives the query command. The terminal device identification information and the authentication information.

An embodiment of the present invention further provides a system for a user to check in, including:

The terminal device obtains the authentication information and sends the information to the client by using a wireless method, where the authentication information includes the first dynamic electronic signature and the identifier information of the terminal device; the authentication information is based on the first key and the first Dynamic parameters, obtaining a first dynamic electronic signature by an encryption algorithm;

a client, configured to receive, by using a wireless manner, authentication information sent by the terminal device, and send the information to the server;

a server, configured to acquire a pre-stored second key corresponding to the terminal device according to the identifier information, and obtain a second dynamic electronic signature by using the preset encryption algorithm according to the second key and the second dynamic parameter And for using the second dynamic electronic signature to enter the first dynamic electronic signature Line authentication, after the certification is passed, it is determined that the user sign-in is successful.

In the above solution, the terminal device is specifically configured to perform a self-signature operation on the first dynamic parameter as the signature parameter and the preset first key according to the cryptographic algorithm, to obtain a set of authentication information.

In the foregoing solution, after the acquiring the first dynamic electronic signature, the first dynamic electronic signature is obtained by the terminal device according to the first dynamic parameter and the first key by using a preset encryption algorithm. Or the dynamic electronic signature is obtained by using a preset encryption algorithm according to the first dynamic parameter and the first key acquired from the client; or the dynamic electronic signature is based on the first obtained from the client. A dynamic parameter and a locally acquired first key are obtained by a preset encryption algorithm.

In the above solution, the authentication information further includes the first dynamic parameter and the second dynamic parameter; the first dynamic parameter and the second dynamic parameter include a time or an event, and the value of the second dynamic parameter is Equivalent to the value of the first dynamic parameter or the value calculated according to the first dynamic parameter.

In the above solution, when the first dynamic parameter and the second dynamic parameter are time, the server is specifically configured to determine a preset time period based on the local time of the server, and at the preset time. The dynamic electronic signature group is obtained by the preset encryption algorithm according to the second dynamic parameter and the second key according to the preset time interval, wherein the dynamic electronic signature group includes multiple second dynamic electronic signatures. ;

The method is further specifically configured to determine whether a second dynamic electronic signature that is the same as the first dynamic electronic signature exists in the dynamic electronic signature group, and when there is a second dynamic electronic signature that is the same as the first dynamic electronic signature, determining The user checked in successfully.

The server is configured to: when the authentication information includes the local time of the terminal device, receive a local time of the terminal device sent by the client, and according to the second key and the terminal device The local time is obtained by the preset encryption algorithm to obtain a second dynamic electronic signature; when the authentication information includes the local time of the client, receiving the local time of the client sent by the client, and according to the second secret And a second dynamic electronic signature obtained by the key and the local time of the client and the second dynamic parameter by using the preset encryption algorithm;

The method is further specifically configured to determine whether the first dynamic electronic signature is the same as the second dynamic electronic signature, and when the first dynamic electronic signature is the same as the second dynamic electronic signature, determining that the user is successfully checked in.

In the above solution, the terminal device is further configured to perform self-signature calculation on the first dynamic parameter, the first key, and the terminal device identification information, which are signature parameters, according to a cryptographic algorithm, to obtain a set of authentication information.

In the foregoing solution, the client is specifically configured to periodically receive the terminal device identification information and the authentication information by using a wireless manner, or receive the terminal device identification information and the authentication information after sending the query instruction.

The method and system for user sign-in provided by the application method include: assigning a terminal device having a self-dynamic signature and a wireless propagation capability to a location that the user needs to check in, and after the user terminal device generates the authentication information, the terminal device passes the wireless device. The method sends the authentication information to the client carried by the user, and the client sends the authentication information to the server by using a wireless method, where the authentication information includes the first dynamic electronic signature and the identifier information of the terminal device; The server obtains a second key corresponding to the terminal device that is pre-stored according to the identifier information, and obtains a second dynamic electronic signature by using the preset encryption algorithm according to the second key and the second dynamic parameter; The server further authenticates the first dynamic electronic signature according to the second dynamic electronic signature, and after the authentication is passed, determines that the user is successfully checked in. In this way, authentication by dynamic electronic signature can improve the authenticity of the user's check-in.

DRAWINGS

FIG. 1 is a schematic flowchart diagram of a method for a user to check in according to an exemplary embodiment of the present application;

FIG. 2 is a schematic flowchart diagram of another method for a user to check in according to an exemplary embodiment of the present application; FIG.

FIG. 3 is a schematic flowchart diagram of another method for a user to check in according to an exemplary embodiment of the present application; FIG.

FIG. 4 is a schematic flowchart diagram of still another method for a user to check in according to an exemplary embodiment of the present application; FIG.

FIG. 5 is a schematic structural diagram of a system that is checked in by a user according to an exemplary embodiment of the present application.

detailed description

Exemplary embodiments will be described in detail herein, examples of which are illustrated in the accompanying drawings. The following description refers to the same or similar elements in the different figures unless otherwise indicated. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present application. Instead, they are merely examples of systems and methods consistent with aspects of the present application as detailed in the appended claims.

The terminology used in the present application is for the purpose of describing particular embodiments, and is not intended to be limiting. The singular forms "a", "the" and "the" It should also be understood that the term "and/or" as used herein refers to and encompasses any and all possible combinations of one or more of the associated listed items.

It should be understood that although the terms first, second, third, etc. may be used to describe various information in this application, such information should not be limited to these terms. These terms are only used to distinguish the same type of information from each other. For example, the first information may also be referred to as the second information without departing from the scope of the present application. Similarly, the second information may also be referred to as the first information. Depending on the context, the word "if" as used herein may be interpreted as "when" or "when" or "in response to a determination."

FIG. 1 is a method for a user to check in according to an embodiment of the present invention. As shown in FIG. 1 , the method includes:

S101. Allocating a terminal device with a self-dynamic signature and a wireless communication capability to a location that the user needs to check in. After the user terminal device generates the authentication information, the terminal device sends the authentication information to the client carried by the user by using a wireless manner, where the client The terminal sends the authentication information to the server by using a wireless method, where the authentication information includes the first dynamic electronic signature and the identification information of the terminal device.

The authentication information includes the first dynamic electronic signature and the identifier information of the terminal device, where the first dynamic electronic signature is obtained by the terminal device according to the first dynamic parameter and the first key by using a preset encryption algorithm; or The dynamic electronic signature is based on the first dynamic parameter obtained from the client and the first The key is obtained by using a preset encryption algorithm; or the dynamic electronic signature is obtained by using a preset encryption algorithm according to the first dynamic parameter acquired from the client and the first key obtained locally. The preset encryption algorithm includes However, it is not limited to the following algorithms: SM1 algorithm, SM3 algorithm, MD5 algorithm, SHA algorithm, AES algorithm, and RSA algorithm.

Further, the first dynamic parameter, the first key, and the terminal device identification information, which are the signature parameters, may be self-signed by the cryptographic algorithm to obtain a set of authentication information.

The terminal device periodically broadcasts the terminal device identification information and the authentication information by using a wireless manner, or sends the terminal device identification information and the authentication information when the terminal device receives the query instruction.

The identification information of the terminal device includes, but is not limited to, a device serial number (SN), a Bluetooth address, a Mac address, a Wifi address, a device name, and the like, and any one or more pieces of information capable of uniquely identifying the device.

In addition, the authentication information further includes the first dynamic parameter and the second dynamic parameter; the first dynamic parameter and the second dynamic parameter include one or more of a time, a challenge code, or an event, where the second dynamic parameter The value is equal to the value of the first dynamic parameter or the value calculated according to the first dynamic parameter. For example, the event may be a patrol task or a security check task of the patrol personnel, which is not limited in this embodiment.

In this step, the first dynamic electronic signature can be obtained in the following three manners. In one manner, the terminal device obtains the first dynamic electronic signature by using a preset encryption algorithm. Specifically, the terminal device acquires the first stored locally dense identifier. Key and local time, and obtaining the first dynamic electronic signature by using a preset encryption algorithm according to the first key and the local time, and sending the obtained first dynamic electronic signature and terminal device identification information to the client, and the second type The first dynamic electronic signature is obtained by using a preset encryption algorithm according to the local time of the terminal device. Specifically, the terminal device acquires the first key stored locally and the local time of the client, according to the first key and the local time. The first dynamic electronic signature is obtained by using a preset encryption algorithm. The third implementation manner is that the terminal device obtains the first dynamic electronic signature by using a preset encryption algorithm according to the local time of the client. Specifically, the terminal device receives the local time of the client. And according to the first key of the terminal device and the local time of the client Default encryption algorithm over the first dynamic electronic signature.

It should be noted that the identifier information of the terminal device may be other information that can uniquely identify the terminal device, such as a serial number or a device name, which is not limited in this embodiment, and the terminal device according to the first dynamic parameter and its own first secret. The key obtains the first dynamic electronic signature by using a preset encryption algorithm, and after obtaining the first dynamic electronic signature, the terminal device may display the obtained first dynamic electronic signature to the user, for example, the first dynamic electronic signature and the identifier may be The information is printed or attached to the terminal device, or the terminal device displays the first dynamic electronic signature and the identification information to the user through a display (such as a liquid crystal display LCD), and of course, can also be displayed to the user by sound or image. The embodiment of the present invention does not limit this. In this way, after the user knows the first dynamic electronic signature and the identification information through the eyes or the ear, the user can transmit through the wireless signal or Bluetooth or WIFI through the client (mobile phone or tablet computer, etc.). Give the server.

In addition, the user can obtain the first dynamic electronic signature and the identification information directly from the terminal device through the client. For example, the terminal device transmits the first dynamic electronic signature and the identification information to the client by using a wireless signal or a Bluetooth or WIFI.

Further, if the first dynamic electronic signature is obtained by the client, the first dynamic electronic signature is directly presented to the user by the client.

S102. The server obtains the stored second key of the terminal device according to the identifier information, and obtains a second dynamic electronic signature by using the preset encryption algorithm according to the second key and the second dynamic parameter.

It should be noted that, when the first dynamic parameter and the second dynamic parameter are time, the step includes the following three implementation manners. In an implementation manner, in step S101, the server does not include the authentication information sent by the server. The local time of the terminal device or the client. At this time, in this step, the server determines a preset time period based on the local time of the server (for example, 5 minutes before and after the current time), and according to the preset time period, according to The second dynamic parameter obtains a dynamic electronic signature group by using the preset encryption algorithm according to a preset time interval (for example, 1 minute), wherein the dynamic electronic signature group includes multiple second dynamic electronic signatures; for example, the server can be preset The encryption algorithm calculates a second dynamic electronic signature corresponding to each minute within 10 minutes centered on the local time of the server, and forms a dynamic electronic signature group according to the obtained second dynamic electronic signature; the second implementation manner is in step S101. The first time the client obtains the local time of the terminal device or the client obtains the local time according to the terminal device. After the dynamic electronic signature, the authentication information sent to the server includes the local time of the terminal device, and the server receives the local time of the terminal device sent by the client, and passes the local key according to the second key and the local time of the terminal device. The preset encryption algorithm obtains the second dynamic electronic signature. The third implementation manner is: if the client sends the first dynamic electronic signature obtained according to the local time in the step S101, the authentication information sent to the server includes the The local time of the client, the server receives the local time of the client sent by the client, and obtains the second dynamic electronic signature by using the preset encryption algorithm according to the second key and the local time of the client.

S103. The server authenticates the first dynamic electronic signature according to the second dynamic electronic signature, and after the authentication is passed, determines that the user is successfully checked in.

If the first dynamic parameter and the second dynamic parameter are time, if the server receives the local time of the client or the terminal device in the authentication information sent by the client, in this step, Determining, by the server, whether the second dynamic electronic signature is the same as the first dynamic electronic signature in the dynamic electronic signature group, and determining that the user is successfully checked when the second dynamic electronic signature is the same as the first dynamic electronic signature; otherwise ,unsuccessful.

If the server receives the local time of the client or the terminal device in the authentication information sent by the client, the server determines whether the first dynamic electronic signature is the same as the second dynamic electronic signature in this step. When the first dynamic electronic signature is the same as the second dynamic electronic signature, the user is determined to be successful in sign-in, otherwise, the user is unsuccessful.

Optionally, after determining that the user is successfully checked in, the location of the stored terminal device is obtained, and the location of the client is determined to be the location of the terminal device, so that the client can be accurately located to obtain the location of the user.

The server stores the location of the terminal device in advance.

It should be noted that the first dynamic electronic signature and the second dynamic electronic signature may be an electronic signature based on a digital certificate or an electronic signature based on a dynamic password, which is not limited in this embodiment.

With the above embodiment, the check-in by dynamic electronic signature can improve the authenticity of the user's sign-in.

2 is a method for a user to check in according to an embodiment of the present invention, as shown in FIG. 2, in this implementation. In the example, the first dynamic parameter or the second dynamic parameter is time, and the authentication information sent by the client to the server does not include the local time of the client or the terminal device, and the method includes:

S201: The client acquires a first dynamic electronic signature obtained by the terminal device according to the local time of the terminal device and the first key by using a preset encryption algorithm, and identifier information of the terminal device.

The preset encryption algorithm includes but is not limited to the following algorithms: SM1 algorithm, SM3 algorithm, MD5 algorithm, SHA algorithm, AES algorithm, and RSA algorithm.

S202. The client sends the authentication information of the terminal device to the server.

The authentication information includes the identifier information of the terminal device and the first dynamic electronic signature, and the identifier information of the terminal device may be other information that can uniquely identify the terminal device, such as a serial number or a device name, which is not limited in this embodiment. The terminal device obtains the first dynamic electronic signature by using a preset encryption algorithm according to the local time and the first key of the user, and after obtaining the first dynamic electronic signature, the terminal device may display the first dynamic electronic signature obtained by the terminal device. To the user, for example, the first dynamic electronic signature and the identification information may be printed or attached to the terminal device, or the terminal device displays the first dynamic electronic signature and the identification information to the user through the liquid crystal display, and of course, The method of the present invention is not limited to the embodiment of the present invention. After the user knows the first dynamic electronic signature and the identification information through the eyes or the ear, the user can use the client (mobile phone or tablet computer, etc.). Wireless signal or Bluetooth or WIFI transmission to the service .

In addition, the user can obtain the first dynamic electronic signature and the identification information directly from the terminal device through the client. For example, the terminal device is labeled with a two-dimensional code label, and the user scans the two-dimensional code label through the client to obtain the first dynamic. The electronic signature and the identification information; or, the terminal device transmits the first dynamic electronic signature and the identification information to the client by using a wireless signal or a Bluetooth or WIFI.

S203. The server acquires a pre-stored second key corresponding to the terminal device according to the identifier information in the authentication information.

S204. The server determines a preset time period based on the local time of the server, and obtains a dynamic electronic signature by using the preset encryption algorithm according to the local time of the server and the second key according to the preset time interval. group.

The dynamic electronic signature group includes a plurality of second dynamic electronic signatures, and the preset time period can be It is 5 minutes before and after the current time, and the preset time interval can be one minute.

S205. The server determines whether a second dynamic electronic signature that is the same as the first dynamic electronic signature exists in the dynamic electronic signature group.

S206. When there is a second dynamic electronic signature that is the same as the first dynamic electronic signature, the server determines that the user is successfully checked in.

With the above embodiment, the authentication by the dynamic electronic signature can improve the authenticity of the user's sign-in.

It should be noted that, for the foregoing method embodiments, for the sake of simple description, they are all expressed as a series of action combinations, but those skilled in the art should understand that the present invention is not limited by the described action sequence, because In the present invention, certain steps may be performed in other orders or simultaneously. In addition, those skilled in the art should also understand that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by the present invention.

FIG. 3 is a method for a user to check in according to an embodiment of the present invention. As shown in FIG. 3, in the embodiment, the first dynamic parameter or the second dynamic parameter is time, and the client sends the authentication information to the server. Including the local time of the client, the method includes:

S301. The client of the user acquires its local time and acquires the identification information of the terminal device and the first key from the terminal device.

S302. The client obtains the first dynamic electronic signature by using a preset encryption algorithm according to the local time and the first key.

S303. The client sends the authentication information of the terminal device to the server.

The authentication information includes the identifier information of the terminal device, the first dynamic electronic signature, and the local time of the client. The identifier information of the terminal device may be other information that can uniquely identify the terminal device, such as a serial number or a device name. The first dynamic electronic signature is obtained by the client according to the first key of the client and the first key, and the first dynamic electronic signature is displayed to the user after the first dynamic electronic signature is obtained. .

S304. The server acquires a pre-stored second key corresponding to the terminal device according to the identifier information in the authentication information.

S305. The server obtains the second dynamic electronic signature by using the preset encryption algorithm according to the second key and the local time of the client.

S306. The server determines whether the first dynamic electronic signature is the same as the second dynamic electronic signature.

S307. When the first dynamic electronic signature is the same as the second dynamic electronic signature, the server determines that the user is successfully checked in.

With the above embodiment, the authentication by the dynamic electronic signature can improve the authenticity of the user's check-in.

FIG. 4 is a method for a user to check in according to an embodiment of the present invention. As shown in FIG. 4, in the embodiment, the first dynamic parameter or the second dynamic parameter is time, and the client sends the authentication information to the server. Including the local time of the terminal device, the method includes:

S401. The client of the user acquires the identification information of the terminal device, the local time of the terminal device, and the first key from the terminal device.

S402. The client obtains the first dynamic electronic signature by using a preset encryption algorithm according to the local time of the terminal device and the first key.

S403. The client sends the authentication information of the terminal device to the server.

The authentication information includes the identifier information of the terminal device, the first dynamic electronic signature, and the local time of the terminal device. The identifier information of the terminal device may be other information such as a serial number or a device name that can uniquely identify the terminal device. This example is not limited, the client is based on the client's And obtaining a first dynamic electronic signature by using a preset encryption algorithm, and displaying the first dynamic electronic signature to the user after obtaining the first dynamic electronic signature.

S404. The server acquires a pre-stored second key corresponding to the terminal device according to the identifier information in the authentication information.

S405. The server obtains the second dynamic electronic signature by using the preset encryption algorithm according to the second key and the local time of the terminal device.

S406. The server determines whether the first dynamic electronic signature is the same as the second dynamic electronic signature.

S407. When the first dynamic electronic signature is the same as the second dynamic electronic signature, the server determines that the user is successfully checked in.

FIG. 5 is a system for a user to check in according to an embodiment of the present invention. As shown in FIG. 5, the system includes:

The terminal device 1 is configured to acquire the first dynamic electronic signature and the identification information of the terminal device, and perform self-signature operation on the first dynamic parameter as the signature parameter and the preset first key according to the cryptographic algorithm, and obtain a set of authentication information. Sending to the client 2 by using a wireless method, where the authentication information includes the first dynamic electronic signature and the identification information of the terminal device; the first dynamic electronic signature is the first dynamic parameter and the first key of the terminal device Obtained by a preset encryption algorithm;

Or the dynamic electronic signature is obtained by using a preset encryption algorithm according to the first dynamic parameter and the first key acquired from the client; or the dynamic electronic signature is the first dynamic parameter acquired according to the client. And obtaining, by the preset encryption algorithm, the first key obtained from the terminal device;

Optionally, the client 2 is specifically configured to periodically receive the terminal device identifier by using a wireless manner. The information and the authentication information, or the terminal device identification information and the authentication information are received after the query command is sent.

The server 3 is configured to obtain a second key corresponding to the terminal device that is pre-stored according to the identifier information, and obtain a second dynamic electronic signature by using the preset encryption algorithm according to the second key and the second dynamic parameter;

The method is further configured to authenticate the first dynamic electronic signature according to the second dynamic electronic signature, and after the authentication is passed, determine that the user is successfully checked in.

Optionally, the authentication information further includes the first dynamic parameter and the second dynamic parameter; the first dynamic parameter and the second dynamic parameter include a time or an event, and the second dynamic parameter has a value equal to the first The value of the dynamic parameter or the value calculated from the first dynamic parameter.

Optionally, when the first dynamic parameter and the second dynamic parameter are time, the processing unit 502 is specifically configured to determine a preset time period based on the local time of the server, and according to the preset time period, according to the preset time period. The second dynamic parameter and the second key are obtained by the preset encryption algorithm according to the preset time interval, wherein the dynamic electronic signature group includes a plurality of second dynamic electronic signatures;

The server 3 is specifically configured to determine whether a second dynamic electronic signature that is the same as the first dynamic electronic signature exists in the dynamic electronic signature group, and when there is a second dynamic electronic signature that is the same as the first dynamic electronic signature, Make sure the user is checked in successfully.

Optionally, when the first dynamic parameter and the second dynamic parameter are time, the authentication information further includes a local time of the terminal device or a local time of the client;

The terminal device is configured to: when the authentication information includes the local time of the terminal device, receive the local time of the terminal device sent by the client, and pass the second key according to the second key and the local time of the terminal device. The preset encryption algorithm obtains a second dynamic electronic signature; when the authentication information includes the local time of the client, receiving the local time of the client sent by the client, and according to the second key and the local time of the client and the first The second dynamic parameter obtains the second dynamic electronic signature by using the preset encryption algorithm;

The server 3 is specifically configured to determine whether the first dynamic electronic signature is the same as the second dynamic electronic signature, and when the first dynamic electronic signature is the same as the second dynamic electronic signature, determining the user signature To success.

The terminal device is further configured to perform a self-signature operation on the first dynamic parameter, the first key, and the terminal device identification information, which are signature parameters, according to a cryptographic algorithm, to obtain a set of authentication information.

Optionally, the server 3 is further configured to obtain a location of the stored terminal device, and determine that the location of the client is a location of the terminal device.

With the above system, the system is authenticated by dynamic electronic signature, which can improve the authenticity of the user's sign-in.

For details of the implementation process of each device in the foregoing system, refer to the implementation process of the corresponding steps in the foregoing method, and details are not described herein again.

For the system embodiment, since it basically corresponds to the method embodiment, it can be referred to the partial description of the method embodiment. The system embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separate, and the components displayed as units may or may not be physical units, ie may be located A location, or it can be distributed to multiple network elements. Some or all of the modules may be selected according to actual needs to achieve the objectives of the present application. Those of ordinary skill in the art can understand and implement without any creative effort.

The above is only the preferred embodiment of the present application, and is not intended to limit the present application. Any modifications, equivalent substitutions, improvements, etc., which are made within the spirit and principles of the present application, should be included in the present application. Within the scope of protection.

Claims

A method for user sign-in, characterized in that it comprises:

A terminal device having a self-dynamic signature and a wireless communication capability is allocated to a location that the user needs to check in. After the user terminal device generates the authentication information, the terminal device sends the authentication information to the client carried by the user through the wireless manner, and the client wirelessly Sending the authentication information to the server, where the authentication information includes the first dynamic electronic signature and the identification information of the terminal device;

And the server obtains a second key corresponding to the terminal device that is stored in advance according to the identifier information, and obtains a second dynamic electronic signature by using the preset encryption algorithm according to the second key and the second dynamic parameter;

The server further authenticates the first dynamic electronic signature according to the second dynamic electronic signature, and after the authentication is passed, determines that the user is successfully checked in.
The user sign-in method according to claim 1, wherein the terminal device of the user generates the authentication information, specifically: the terminal device uses the first dynamic parameter and the preset as the signature parameter according to the cryptographic algorithm. The first key performs a self-signature operation, obtains a set of authentication information, and transmits the signature information and the device information by wireless.
The method for the user to check in according to claim 2, wherein the user terminal device acquires a first dynamic electronic signature, specifically, the first dynamic electronic signature is that the terminal device is according to the first dynamic The parameter and the first key are obtained by using a preset encryption algorithm; or the first dynamic electronic signature is obtained by using a preset encryption algorithm according to the first dynamic parameter and the first key acquired from the client; or The first dynamic electronic signature is obtained by using a preset encryption algorithm according to the first dynamic parameter acquired from the client and the locally acquired first key.
The method for signing in a user according to claim 2 or 3, wherein the authentication information further includes the first dynamic parameter and the second dynamic parameter; the first dynamic parameter and the second dynamic The parameter includes one or more of a time, a challenge code, or an event, and the value of the second dynamic parameter is equivalent to a value of the first dynamic parameter or a value calculated according to the first dynamic parameter.
The method for signing in a user according to claim 4, wherein when the first dynamic parameter and the second dynamic parameter are time, the second key and the second dynamic parameter are Obtaining the second dynamic electronic signature by using the preset encryption algorithm includes:

Determining a preset time period based on the local time of the server;

And the dynamic electronic signature group is obtained by using the preset encryption algorithm according to the second dynamic parameter and the second key according to the preset time interval, where the dynamic electronic signature group includes multiple Second dynamic electronic signature;

The server authenticates the first dynamic electronic signature according to the second dynamic electronic signature. After the authentication is passed, determining that the user successfully signs in the check includes:

Determining whether there is a second dynamic electronic signature identical to the first dynamic electronic signature in the dynamic electronic signature group, and determining that the user is checked in when there is a second dynamic electronic signature identical to the first dynamic electronic signature success.
The method for signing in a user according to claim 4, wherein when the first dynamic parameter and the second dynamic parameter are time, the authentication information further includes a local time of the terminal device or The local time of the client;

When the authentication information includes the local time of the terminal device, the obtaining, by the preset encryption algorithm, the second dynamic electronic signature according to the second key and the second dynamic parameter includes: the server receiving the The local time of the terminal device sent by the client, and obtaining the second dynamic electronic signature by using the preset encryption algorithm according to the second key and the local time of the terminal device;

When the authentication information includes the local time of the client, the obtaining the second dynamic electronic signature by using the preset encryption algorithm according to the second key and the second dynamic parameter includes: the server receiving the client sending The local time of the client, and obtaining a second dynamic electronic signature by using the preset encryption algorithm according to the second key and the local time of the client and the second dynamic parameter;

The server authenticates the first dynamic electronic signature according to the second dynamic electronic signature. After the authentication is passed, determining that the user successfully signs in the check includes:

Determining whether the first dynamic electronic signature is the same as the second dynamic electronic signature, in the When a dynamic electronic signature is the same as the second dynamic electronic signature, the user is determined to be successful.
The method for signing in a user according to claim 1, further comprising performing a self-signature operation on the first dynamic parameter, the first key, and the terminal device identification information as the signature parameter according to the cryptographic algorithm, to obtain a set of authentication information. .
The user sign-in method according to claim 1, wherein the client sends the authentication information in a wireless manner, specifically: the client periodically broadcasts the terminal device identification information and the authentication information by using a wireless manner. Or, when the client receives the query instruction, the terminal device identification information and the authentication information are sent.
A system for user sign-in, characterized in that it comprises:

The terminal device is configured to obtain the authentication information and send the information to the client by using a wireless method, where the authentication information includes the first dynamic electronic signature and the identifier information of the terminal device, where the authentication information is based on the first key and a first dynamic parameter, the first dynamic electronic signature obtained by the encryption algorithm;

a client, configured to receive, by using a wireless manner, authentication information sent by the terminal device, and send the information to the server;

a server, configured to acquire a pre-stored second key corresponding to the terminal device according to the identifier information, and obtain a second dynamic electronic signature by using the preset encryption algorithm according to the second key and the second dynamic parameter And the method is further configured to authenticate the first dynamic electronic signature according to the second dynamic electronic signature, and after the authentication is passed, determine that the user is successfully checked in.
The system for signing in a user according to claim 9, wherein the terminal device is specifically configured to perform self-signing operation on the first dynamic parameter as the signature parameter and the preset first key according to the cryptographic algorithm. , get a set of authentication information.
The system for signing in a user according to claim 10, wherein the terminal device is configured to: after acquiring the first dynamic electronic signature, specifically, the first dynamic electronic signature is the terminal device according to the first The dynamic parameter and the first key are obtained by using a preset encryption algorithm; or the dynamic electronic signature is obtained by using a preset encryption algorithm according to the first dynamic parameter and the first key acquired from the client; or The dynamic electronic signature is obtained by using a preset encryption algorithm according to the first dynamic parameter acquired from the client and the locally acquired first key.
A system for user sign-in according to claim 10 or 11, wherein the authentication information further includes the first dynamic parameter and the second dynamic parameter; the first dynamic parameter and the second dynamic The parameter includes a time or an event, and the value of the second dynamic parameter is equivalent to a value of the first dynamic parameter or a value calculated according to the first dynamic parameter.
A system for a user to check in according to claim 12, wherein the server is specifically configured to determine a locality based on the server when the first dynamic parameter and the second dynamic parameter are time a preset time period of the time, and the dynamic electronic signature group is obtained by the preset encryption algorithm according to the second dynamic parameter and the second key according to the preset time interval, where The dynamic electronic signature set includes a plurality of second dynamic electronic signatures;

The method is further specifically configured to determine whether a second dynamic electronic signature that is the same as the first dynamic electronic signature exists in the dynamic electronic signature group, and when there is a second dynamic electronic signature that is the same as the first dynamic electronic signature, determining The user checked in successfully.
The user-check-in system according to claim 12, wherein when the first dynamic parameter and the second dynamic parameter are time, the authentication information further includes a local time of the terminal device or The local time of the client;

The server is configured to: when the authentication information includes the local time of the terminal device, receive a local time of the terminal device sent by the client, and according to the second key and the terminal device The local time is obtained by the preset encryption algorithm to obtain a second dynamic electronic signature; when the authentication information includes the local time of the client, receiving the local time of the client sent by the client, and according to the second secret And a second dynamic electronic signature obtained by the key and the local time of the client and the second dynamic parameter by using the preset encryption algorithm;

The method is further specifically configured to determine whether the first dynamic electronic signature is the same as the second dynamic electronic signature, and when the first dynamic electronic signature is the same as the second dynamic electronic signature, determining that the user is successfully checked in.
The user-check-in system according to claim 9, wherein the terminal device is further configured to perform self-identification on the first dynamic parameter, the first key, and the terminal device identification information as the signature parameter according to the cryptographic algorithm. Signature operation to obtain a set of authentication information.
The system of the user sign-in according to claim 9, wherein the client is specifically configured to periodically receive the terminal device identification information and the authentication information by using a wireless manner, or receive the query after sending the query instruction. Terminal device identification information and authentication information.