WO2019033840A1

WO2019033840A1 - Password authentication method for shared device, shared device, cloud server, and system

Info

Publication number: WO2019033840A1
Application number: PCT/CN2018/090666
Authority: WO
Inventors: 杨赛赛; 苗岑岑; 李喜林
Original assignee: 格力电器（武汉）有限公司; 珠海格力电器股份有限公司
Priority date: 2017-08-16
Filing date: 2018-06-11
Publication date: 2019-02-21
Also published as: CN107483581A; CN107483581B

Abstract

Disclosed in the present application are a password authentication method for a shared device, a shared device, a cloud server, and a system. By adopting the same preset password generation rule for passwords in a corresponding cloud password database of a shared device in a cloud server and passwords in a device password database of the shared device, before using the shared device, a user can first extract a corresponding password from the cloud password database using requirement information for the device to be used, the password being obtained in advance by using the preset password generation rule for the requirement information, and then input the password into the shared device. When the shared device finds a password corresponding to the password from its own device password database, the requirement information of the user can be determined by using the found password and the preset password generation rule, such that synchronous verification of passwords is completed without the need for connecting the cloud server and the shared device to a network.

Description

Password authentication method for shared device, shared device, cloud server and system

Related application

The present application claims priority to Chinese Patent Application No. 201710703147.0, entitled "Password Verification Method for Shared Device, Shared Device, Cloud Server and System", which is hereby incorporated by reference. reference.

Technical field

The present application relates to the field of shared device technologies, and in particular, to a password authentication method, a shared device, a cloud server, and a system for a shared device.

Background technique

In recent years, various shared devices with self-service payment functions have emerged, such as sharing bicycles, sharing electric vehicles, sharing automobiles, and sharing washing machines. The use of these shared devices is very convenient and fast. Users can download the corresponding client and register as needed. When the shared device needs to be used, log in to the corresponding client, enter the code of the shared device to obtain the unlock code, or directly Unlocking is performed by scanning the identification code on the shared device to be used. After using it, you can pay by online.

These shared devices all have one thing in common: they need to connect to the Internet or establish short-range wireless communication with mobile terminals, such as mobile phones, in order to synchronize information with users and implement password verification. Therefore, shared devices usually have Wireless module.

Since the password authentication process of the shared device needs to be implemented based on the network, the use of the shared device is restricted by the network, and there is a risk of insecure attacks on the Internet. Therefore, how to provide a password authentication method for the shared device to enable the shared device and the cloud server Realizing synchronous verification of passwords between users and shared devices without the need to connect to the network has become a technical problem that those skilled in the art need to solve.

Summary of the invention

In view of this, the present application discloses a password authentication method, a shared device, a cloud server, and a system for a shared device, so that the shared device and the cloud server can still implement a password between the user and the shared device without connecting to the network. Synchronize the verification process.

A password authentication method for a shared device is applied to a cloud server, where the cloud server has a plurality of cloud password databases, and each cloud password database corresponds to a shared device, and the method includes:

Obtaining a device identity of the shared device to be used input by the user, and determining a corresponding cloud password database according to the device identity;

Obtaining user information input by the user and demand information about the shared device to be used;

Selecting a cloud cipher group from the cloud cipher library, and recording the cloud cipher group and the user information in a correspondence relationship;

Extracting a password corresponding to the requirement information from the cloud cipher group, where the password is a password obtained by using a preset password generation rule for the demand information in advance;

And returning the password to the user, so that when the user uses the shared device to be used, the shared device that uses the shared device uses the password to find out whether the device and the password are stored. The password with the same password is used, and if yes, the required information of the user is determined by using the found password and the preset password generation rule, and the synchronization verification of the password is completed.

Preferably, the cloud cryptographic database includes a plurality of cloud cipher groups, each cloud cipher group corresponding to one user, and each cloud cipher group is generated according to a preset password generation rule for the shared device in different working conditions. A collection of all passwords.

Preferably, the device-side crypto library includes a plurality of device-side cipher groups, each device-side cipher group corresponding to one user, and each shared device stores all passwords in the device-side password store and a cloud corresponding to the shared device. The passwords in the password database are generated by using the same preset password generation rules for the user's demand information.

Preferably, when the cloud server provides a password to the user after the user completes the payment, the password corresponding to the demand information is extracted from the cloud cipher group, and the method includes:

Extracting, from the cloud cipher group, a fee corresponding to the demand information that needs to be paid by the user;

After detecting that the user has paid the fee, the password corresponding to the demand information is extracted from the cloud cipher group.

Preferably, after detecting that the user has paid the fee, the password corresponding to the demand information is extracted from the cloud cipher group, which specifically includes:

After detecting that the user has paid the fee, extracting a password corresponding to the demand information from the cloud cipher group, and marking a user level, wherein when a plurality of users need to pay a fee, the user The level is determined according to the order in which the users complete the payment, and the higher the time for the user to complete the payment, the higher the corresponding user level;

And returning the password to the user, so that when the user uses the shared device to be used, the shared device that uses the shared device uses the password to find out whether the device and the password are stored. The password with the same password is used to determine the required information of the user by using the found password, and the synchronization verification of the password is completed, which specifically includes:

And returning the password to the user, so that when the user uses the shared device to be used, the shared device that uses the shared device uses the password to find out whether the device and the password are stored. The password with the same password is used. If yes, the user level and requirement information of the user is determined, and the synchronization verification of the password is completed.

Preferably, all cloud cipher groups in the cloud cipher pool and all device cipher groups in the device cipher library use the same cipher classification scheme.

A password verification method for a shared device is applied to a shared device to be used, and the method includes:

Obtaining a password obtained by the user in the cloud password database, where the password is a password obtained by using a preset password generation rule for the requirement information, where the requirement information is demand information of the user to the shared device to be used;

Using the password to find out from its own device side password database whether the same password as the password is stored;

If yes, determining the demand information of the user by using the found password and the preset password generation rule, and completing synchronization verification of the password.

Preferably, the password is used to search for a password that is the same as the password by using the password of the device, and the password includes:

Searching, by using the password, from the device-side cipher group placed in the valid password reservation area of the device-side cipher library of the device, whether to store the same password as the password, wherein the valid password reservation area is used to reserve the A password that has been obtained but not used by the shared device.

When the same password as the password is not found from the valid password reservation area of the device-side password bank of the device, the device-side password group that has been generated by the device-side password library is searched for whether the password is stored. The same password.

Preferably, when the same password as the password is found in the device-side cipher group that has been generated by the device-side cipher library, and the level of the cloud cipher group, the level of the device-side cipher group, and the user level are the same, Determining the user's requirement information by using the found password and the preset password generation rule, and completing the synchronization verification of the password, specifically:

Determining the user level and requirement information of the user by using the found password and the preset password generation rule, and completing synchronization verification of the password.

Preferably, after the synchronization verification of the password is completed, the method further includes:

Putting an unused device-side cipher group of a higher level than the user level into the valid password reservation area;

Delete all device-side cipher groups whose level is lower than the user level.

Preferably, after determining the user's requirement information and completing the synchronization verification of the password, the method further includes:

The password that verified the success is deleted.

Preferably, the method further includes:

When the same password as the password is not found from the device-side password library, prompt information is output, and the prompt information is used to prompt the user to re-enter the password.

A cloud server, the cloud server has a plurality of cloud cryptographic libraries, and each cloud cryptographic library corresponds to a shared device, and the cloud server includes:

a first acquiring unit, configured to acquire a device identity of the shared device to be used by the user, and determine a corresponding cloud password database according to the device identity;

a second acquiring unit, configured to acquire user information input by the user and demand information about the shared device to be used;

a selecting unit, configured to select a cloud cipher group from the cloud cipher pool, and record the cloud cipher group and the user information in a correspondence relationship;

An extracting unit, configured to extract a password corresponding to the requirement information from the cloud cipher group, where the password is a password obtained by using a preset password generating rule in advance for the demand information;

a feedback unit, configured to feed back the password to the user, so that when the user uses the shared device to be used, the shared device uses the password to search from its own device-side password database. Whether the password with the same password is stored, and if yes, determining the demand information of the user by using the found password and the preset password generation rule, and completing synchronization verification of the password.

Preferably, when the cloud server provides a password to the user after the user completes the payment, the extracting unit includes:

a first extracting subunit, configured to extract, from the cloud cipher group, a fee corresponding to the demand information that needs to be paid by the user;

a second extracting subunit, configured to: after detecting that the user has paid the fee, extract a password corresponding to the demand information from the cloud cipher group.

Preferably, the second extraction subunit is specifically configured to:

The feedback unit is specifically configured to:

A shared device, including:

a third obtaining unit, configured to acquire a password obtained by the user in the cloud password database, where the password is a password obtained by using a preset password generation rule for the requirement information, where the demand information is that the user uses the shared device to be used. Demand information;

a searching unit, configured to use, by using the password, to find, from its own device-side password database, whether a password with the same password is stored;

The verification unit is configured to determine the user's demand information by using the found password and the preset password generation rule, and complete synchronization verification of the password.

Preferably, the searching unit is specifically configured to:

Preferably, when the same password as the password is found in the device-side cipher group that has been generated by the device-side cipher library, and the level of the cloud cipher group, the level of the device-side cipher group, and the user level are the same, The verification unit is specifically configured to:

Preferably, the method further includes:

a placing unit, configured to: after the synchronization verification of the password is completed, put an unused device-side cipher group of a level higher than the user level into the valid password reservation area;

The first deleting unit is configured to delete all device-side cipher groups whose level is lower than the user level.

Preferably, the method further includes:

The second deleting unit is configured to delete the password that is successfully verified after determining the user's requirement information and completing the synchronization verification of the password.

Preferably, the method further includes:

And an output unit, configured to output prompt information when the password is the same as the password, and the prompt information is used to prompt the user to re-enter the password.

A password authentication system for a shared device, comprising the cloud server described above and at least one of the shared devices described above.

As disclosed in the foregoing technical solution, the present application discloses a password authentication method, a shared device, a cloud server, and a system for a shared device, by using a password of the shared device in the cloud password database corresponding to the cloud server, and the shared device The password in the device-side password database uses the same preset password generation rule. The user can use the demand information of the device to be used before using the shared device. First, the corresponding password is extracted from the cloud password database. The preset password generation rule is used, and then the password is input to the shared device. When the shared device finds the password corresponding to the password from its device-side password database, the used password and the preset password generation rule can be utilized. The user's demand information is determined, thereby completing the synchronous verification of the password. Therefore, the present application implements a password synchronization verification process between a user and a shared device based on the same password generation rule in the case that the cloud server and the shared device do not need to connect to the network, so that the use of the shared device is no longer affected. Network restrictions, which effectively avoid the risk of Internet insecure attacks.

DRAWINGS

In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings to be used in the embodiments or the prior art description will be briefly described below. Obviously, the drawings in the following description are only It is an embodiment of the present application, and other drawings can be obtained according to the disclosed drawings without any creative work for those skilled in the art.

FIG. 1 is a flowchart of a method for verifying a password of a shared device based on a cloud server side according to an embodiment of the present application;

2 is a schematic diagram of correspondence between a fee, a password, a cloud cipher group, and a cloud cipher library according to an embodiment of the present application;

FIG. 3 is a schematic diagram of a correspondence between a cloud server and a shared device according to an embodiment of the present disclosure;

4 is a flowchart of a password verification method based on a shared device on a shared device side according to an embodiment of the present disclosure;

FIG. 5 is a schematic structural diagram of a cloud server according to an embodiment of the present application;

FIG. 6 is a schematic structural diagram of a shared device according to an embodiment of the present disclosure.

Detailed ways

The technical solutions in the embodiments of the present application are clearly and completely described in the following with reference to the drawings in the embodiments of the present application. It is obvious that the described embodiments are only a part of the embodiments of the present application, and not all of the embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present application without departing from the inventive scope are the scope of the present application.

The embodiment of the present application discloses a password authentication method, a shared device, a cloud server, and a system for a shared device, so that the shared device and the cloud server can still implement password synchronization between the user and the shared device without connecting to the network. Verification process.

1 is a flowchart of a method for verifying a password of a shared device according to an embodiment of the present application. The method is applied to a cloud server, where the cloud server is associated with at least one shared device, and the cloud server has multiple cloud password databases. Each cloud password library corresponds to a shared device, and the method includes the steps of:

Step S101: Obtain a device identity of the shared device to be used input by the user, and determine a corresponding cloud password database according to the device identity;

In an actual application, the user can scan the two-dimensional code of the shared device through a terminal such as a mobile phone or an IPAD to obtain the device identity of the shared device, and the device identity is also the device identifier. Of course, the user can also obtain the device identity of the shared device in other ways, such as by inputting the identity code printed on the shared device into the computer to obtain the device identity of the shared device.

Each of the shared devices has a unique device identity.

Step S102: Obtain user information input by the user and demand information of the shared device to be used;

Specifically, the user information specifically refers to the identity information of the user, such as an identity card number.

For the demand information of the shared device, for example, if the shared device is a shared washing machine, the user's demand information for the shared washing machine includes: laundry time, number of rinsing, washing temperature, rotation speed, and the like.

Step S103: Select a cloud cipher group from the cloud cipher pool, and record the cloud cipher group and the user information in a correspondence relationship;

In this embodiment, a cloud cryptographic database includes a plurality of cloud cipher groups, and each cloud cipher group corresponds to one user, and each cloud cipher group is generated according to a preset password generation rule for the shared device in different working conditions. A collection of all passwords, that is, each cloud cipher group contains all the conditions that the user needs to use the shared device. For example, if the shared device is a shared washing machine, the user's demand information for the shared washing machine, that is, the shared washing machine, is: the laundry time is 30 minutes, the laundry mode is: two rinsing plus one dehydration, and the clothing type is: shirt, according to The demand information and the preset password generation rules, such as the password generation formula, obtain a password uniquely corresponding to the demand information.

A set of all passwords is generated by arranging and combining the shared washing machines according to the preset password generation rules in different working situations, that is, obtaining a cloud cipher group.

When the cloud cipher group is arranged in order in the cloud cipher library, the cloud cipher group in front of the array can be selected as the cloud cipher group. Of course, a cloud cipher group can also be randomly selected.

The purpose of recording the cloud cipher group and the user information in the form of a corresponding relationship is to implement a real-name system used by the shared device to avoid providing services to users who do not meet the age requirement, such as users who share the bicycle need to be at least 12 years old. At the same time, it provides conditions for the subsequent purchase of personal accident insurance and third party liability insurance for users.

In an actual application, different levels of each cloud cipher group included in the cloud cipher pool can be set, and different levels are set for the user, for example, the user's level is determined according to the total number of times the user has used the shared device, and the number of times the user uses The more users, the higher the level of users, the corresponding level of users and cloud password groups correspond.

Therefore, the execution process of the step is specifically: first determining a plurality of cloud cipher groups corresponding to the shared device to be used, and secondly, determining a user level according to the user information, and determining a corresponding cloud cipher group according to the user level.

Step S104: Extract a password corresponding to the demand information from the cloud cipher group;

The password is a password obtained by using a preset password generation rule in advance for the requirement information, that is, the password is generated according to a preset password generation rule for a shared device in a different combination of working conditions, and therefore, According to the demand information, that is, the working condition of the shared device, the corresponding password can be extracted from the cloud cipher group.

Step S105: The password is fed back to the user, so that when the user uses the shared device to be used, the shared device uses the password and its own device-side password database to determine the user's demand information, and completes the synchronous verification of the password.

Specifically, the cloud password database feeds back the found password to the user. When the user uses the shared device to be used, the password is input to the shared device to be used, and the shared device uses the password to search for the stored password from the device-side password database. The password that is the same as the password entered by the user. If yes, the password is found and the preset password generation rule is used to determine the user's demand information, and the password verification is completed.

The device-side password library includes multiple device-side password groups, and each device-side password group corresponds to one user, and all passwords stored in the device-side password library of each shared device and the cloud password corresponding to the shared device are configured. The passwords in the library are generated by using the same preset password generation rules for the user's demand information. Thus, the shared device can determine the user's demand information according to the password obtained by the user from the cloud password database.

In summary, the password verification method of the shared device disclosed in the present application adopts the same preset password by using the password in the cloud password database corresponding to the shared device in the cloud server and the password in the device password database of the shared device. A rule is generated, so that the user can use the demand information of the device to be used before using the shared device, first extracting a corresponding password from the cloud password database, and the password is obtained by using a preset password generation rule for the demand information, and then inputting the password to the password. When the shared device finds the password corresponding to the password from its own device-side password database, it can use the found password and the preset password generation rule to determine the user's demand information, thereby completing the synchronization verification of the password. . Therefore, the present application implements a password synchronization verification process between a user and a shared device based on the same password generation rule in the case that the cloud server and the shared device do not need to connect to the network, so that the use of the shared device is no longer affected. Network restrictions, which effectively avoid the risk of Internet insecure attacks.

In addition, since the method disclosed in the present application does not need to establish a network connection between the shared device and the cloud server, the present application also saves the wireless module disposed on the shared device, thereby saving the shared device. Hardware cost.

It can be understood that different sharing devices may have different time requirements for payment, such as sharing a washing machine. When the user determines the demand information for the shared washing machine, the shared washing machine can generate a corresponding fee according to the demand information; for example, sharing the bicycle, due to advance The user's usage time cannot be known, so the user's fee cannot be determined in advance. For such shared devices, the user can pay after the user completes the use.

For the solution that the user pays for using the shared device, refer to the existing solution, and details are not described herein again.

For the scenario where the user pays to use the shared device first, see the example below.

In the above embodiment, when the cloud server provides the password to the user after the user completes the payment, the step S104 specifically includes:

Extracting the fee corresponding to the demand information from the cloud cipher group and requiring the user to pay;

Based on this embodiment, it can be seen that the fee and the password are extracted from the cloud cipher group according to the user's requirement, for example, the shared washing machine, and the cloud server can find one from the cloud cipher group according to the laundry duration, the rotation speed, and the washing temperature selected by the user. Correspondingly, the user needs to pay the fee. After the user pays successfully, the cloud server provides the user with a corresponding password.

The correspondence between the fee, the password, the cloud cipher group and the cloud cipher pool can be seen in the schematic diagram shown in FIG. 2. In FIG. 2, the cloud cipher library includes multiple cloud cipher groups, such as cloud cipher group 1 and cloud cipher group 2 .......Cloud cipher group X, each cloud cipher group corresponds to one user, and multiple users correspond to multiple cloud cipher groups. In actual applications, all cloud cipher groups can be grouped into cloud ciphers according to level order. The library, each cloud cipher group is a set of all passwords generated according to a preset password generation rule for a shared device in a different combination of working conditions, that is, each cloud cipher group includes all cases in which the user needs to use the shared device. For example, in the cloud cipher group X in Figure 2, the different working conditions of the shared device include factors: (1) the usage duration of the shared device, such as 5 minutes, 10 minutes, 20 minutes; (2) the number, taking the shared washing machine as an example. The quantity may refer to the quantity of laundry required by the user, such as 1, 2, 3; (3) the variable (variable 3 in FIG. 2, variable N) refers to the working mode and cost of the shared device. Variable factors, different durations can be considered as an element of a variable under a variable may include various elements, such as element a, element B, element c and the like. The combination of different factors produces a password and a unique fee corresponding to the password. As shown in FIG. 2, the password a corresponds to the fee a, the password b corresponds to the fee b, the password c corresponds to the fee c, and the password d and the fee d Correspondingly, the password e corresponds to the fee e.

It should be noted that the cloud server and the at least one shared device are in a corresponding relationship, and the cloud server and each shared device can form a system, and the cloud server and the multiple shared devices form a plurality of systems. In actual applications, the same system must ensure The preset password generation rules (including the password generation algorithm and encryption principle) adopted by the device-side password database and the corresponding cloud password database are the same, and the preset password generation rules between different systems may be different. Moreover, it is also necessary to ensure that the passwords in a certain number of cloud cipher groups continuously generated by the cloud cipher pool cannot be duplicated.

Preferably, in the foregoing embodiment, all cloud cipher groups in the cloud cipher pool and all device cipher groups in the device cipher pool can adopt the same password classification and grading scheme, that is, the same demand information for the same user. The corresponding cloud cipher group and the device cipher group have the same level, and the password in the cloud cipher group and the password in the device cipher group use the same preset password generation rule, but the password and the device end in the cloud cipher group The time generated by the password in the cipher group can be the same or different.

In order to facilitate the search for the password, in the actual application, for the scheme of paying the shared device first, the user level can be determined according to the order in which the user completes the payment, and when the multiple users need to pay the fee, the user pays the higher time. The higher the corresponding user level, the user level and the corresponding level of the cloud cipher group and the level of the device cipher group are the same.

FIG. 3 is a schematic diagram of a correspondence between a cloud server and a shared device according to an embodiment of the present disclosure. In FIG. 3, only the correspondence between a cloud server and a shared device is shown. In an actual application, one may be used. The cloud server corresponds to multiple shared devices, and multiple shared devices are managed separately in the corresponding cloud cryptosystem in the cloud server, which has complementary effects.

As shown in FIG. 2 and FIG. 3, when the user inputs different demand information to the cloud password database, such as time, work mode, quantity, variable 3, variable 4, etc., different passwords can be obtained from the cloud password database, wherein different The user obtains different passwords. For example, user 1 obtains password 1, user 2 obtains password 2, user 3 obtains password 3, user 4 obtains password 4, and user 5 obtains password 5 and so on.

In the actual application, the cloud cipher group can be divided into levels. According to the direction of the arrow in FIG. 3, the level of the cloud cipher group gradually increases. Since one cloud cipher group corresponds to one user, each user will correspondingly The cloud cipher group obtains the password. Therefore, in the embodiment shown in FIG. 3, the levels of the passwords 1 to 5 are gradually increased.

On the shared device side, the device-side password database includes multiple device-side cipher groups, such as device-side cipher groups 1 to 5. Each device-side cipher group corresponds to one user. For example, device-side cipher group 5 corresponds to user 5, and device-side The password in the cipher group and the password in the cloud cipher group are the same as the default password generation rules.

If the cloud cipher group is classified, then the device cipher group can be classified according to the direction indicated by the arrow in FIG. 3, and the level of the device cipher group is gradually increased.

Among them, the user level, the device-side cipher group level, and the cloud cipher group level are the same.

In the actual application, the peer users use the same-level device-side cipher group, and the peer-end device-side cipher group can be rotated normally. Of course, in some cases, the user can also use the device-side cipher group, as shown in Figure 3 Device-side cipher group 2 should be used normally. However, in some cases, user 2 can also use device-side cipher group 3. In this case, low-level device-side cipher group 1 and device-side cipher group 2 can be placed into valid passwords. Reserved area, used below.

In order to further optimize the foregoing embodiment, the process of extracting the password corresponding to the demand information from the cloud cipher group after detecting the payment of the user's fee may include:

After detecting that the user has paid the fee, the password corresponding to the demand information is extracted from the cloud cipher group, and the user level is marked, wherein when a plurality of users need to pay a fee, the user level is completed according to the user. The order of payment is determined, the higher the time for the user to complete the payment, the higher the corresponding user level.

It should be noted that the password provided by the cloud server to the user is extracted from the cloud password group corresponding to the user level according to the user input information, for example, the shared washing machine, and the user's demand information includes: the washing time is 30 minutes. The rinsing is performed twice, and the dehydration is performed once. The cloud server extracts the corresponding password from the cloud cipher group corresponding to the user level according to the demand information.

Correspondingly, step S105 specifically includes:

Sending the password to the user, so that when the user uses the shared device to be used, the shared device that uses the use of the password uses the password to find out whether the same password as the password is stored from the device-side password database. If yes, the user level and requirement information of the user is determined, and the verification of the password is completed.

When the user inputs a password to the shared device, the user may input the number in the form of a number, or the self-identification of the two-dimensional code certificate generated by the shared device according to the user's payment, or input by a password voice recognition method.

It should be noted that the passwords are arranged in the device-side cipher group regardless of the level. Only the password is input to the shared device by the user, and the level is determined after the use, and the level of the password and the corresponding device-side cipher group are determined. The same level.

Referring to FIG. 4, a flow chart of a password verification method for a shared device disclosed in another embodiment of the present application is applied to a shared device to be used, such as a shared bicycle, a shared electric vehicle, a shared washing machine, and the like. The method includes the steps of:

Step S201: Acquire a password obtained by the user in the cloud password database;

The password is a password obtained by using a preset password generation rule in advance for the requirement information, and the demand information is demand information of the user to the shared device to be used.

For the process of obtaining a password in the cloud password database, refer to the embodiment shown in FIG. 1 , and details are not described herein again.

Step S202: Searching, by using a password, from its own device-side password database, whether a password with the same password is stored;

The device-side password library includes multiple device-side cipher groups, and each device-side cipher group corresponds to one user, and each shared device stores all passwords in the device-side password store and the cloud cipher library corresponding to the shared device. The passwords are generated by using the same preset password generation rules for the user's demand information. In this way, the shared device can determine the user's demand information according to the password obtained by the user from the cloud password database and the preset password generation rule.

In this step, the purpose of using the shared device to determine whether the password of the user-side password store is the same as the password input by the user is to determine whether the password input by the user is a valid password.

Step S203, if yes, determining the user's demand information by using the found password and the preset password generation rule, and completing the synchronization verification of the password.

The cloud cryptographic database includes a plurality of cloud cipher groups, each cloud cipher group corresponding to one user, and each cloud cipher group is generated according to a preset password generation rule for the shared device in different working conditions. A collection of all passwords.

Wherein, when the same password as the password is not found from the device-side password library, prompt information is output, and the prompt information is used to prompt the user to re-enter the password.

As shown in Figure 3, in the actual application, a valid password reservation area can be set in the device-side password database. When the shared device needs to determine whether the password input by the user is stored, the priority can be preferentially searched in the valid password reserved area. If the password reservation area is not found, it is searched from the device-side password group that has been generated by the device-side password library and is not located in the valid password reserved area.

The valid password reserved area is mainly used to reserve the password that is to be used but not used by the shared device.

Therefore, in order to further optimize the foregoing embodiment, step S202 may specifically include:

Using the password from the device-side cipher group placed in the valid password reservation area of its own device-side crypto library, it is found whether the same password as the password is stored.

Step S202 may specifically include:

In an actual application, for a scheme of paying for a shared device first, the user level may be determined according to the order in which the user completes the payment. When multiple users need to pay the fee, the user pays the higher the time, and the corresponding user level is higher. The level of the user level, the cloud cipher group, and the level of the device cipher group are the same.

Therefore, after the cloud server extracts the password and marks the user level, the shared device can determine the user level according to the level of the device-side cipher group where the password matching the password provided by the user is located.

Therefore, when the same password as the password is found in the device-side cipher group that has been generated by the device-side cipher library, step S203 in the above embodiment may specifically include:

The user level and requirement information of the user is determined by using the found password and the preset password generation rule, and the synchronization verification of the password is completed.

It should be noted that when the password of the valid password reservation area is used, the normal level of password rotation is not affected, and the password in the valid password reservation area will not disappear until it is used.

After the synchronization verification of the password is completed, an unused device-side cipher group of a higher level than the user level can be placed in the valid password reservation area, and all device-side cipher groups whose level is lower than the user level can be deleted.

The cloud cipher group in the cloud cipher library and the device cipher group in the device cipher library are gradually generated according to a preset rule, and the low level cipher group is gradually eliminated by setting rules to ensure the cloud of the cloud cipher library. The device-side cipher group in the cipher group and the device-side cipher library is within a certain number of ranges and is not repeated.

The cloud cipher group can add one or more cloud cipher groups after providing the user password or the user to complete a payment behavior, or increase the cloud cipher group of a certain data by a certain number of days, or according to the frequency of the user. To determine the number of passwords generated, the invalid cloud cipher group can be removed by setting the validity period of the cloud cipher group and automatically deleting it after the expiration. After the user completes the self-service and the feedback is completed, the cloud cipher group used is deleted. ; can also be mixed in a variety of ways.

Whether the device-side cipher group needs to be increased, such as the number of times the user uses, the time interval used, the number of existing valid device-side cipher groups, the working characteristics of the shared device, and the password level entered by the user, etc. The hybrid mode is determined, and the elimination of the invalid password is subject to the automatic deletion used by the user.

After a period of use, when the shared device has acquired but the unused password is increased, the capacity in the effective password reserved area will become larger and larger. When it is increased to a certain amount, it will be eliminated in a certain way to share the working characteristics of the device. The user uses this time to comprehensively judge the password level in the valid password reserved area.

In the foregoing embodiment, after determining the user's requirement information and completing the synchronization verification of the password, the method further includes:

Delete the password that verified the success.

It should be noted that, in the present application, when an abnormal situation occurs in the working process of the shared device, for example, when the power is turned off, the shared device stores the information before the abnormal situation, and after the normal operation is resumed, the previous work is continued until the completion of the work. Secondary service.

Corresponding to the foregoing method embodiments, the present application also discloses a cloud server and a shared device, and specifically refer to the following description.

Referring to FIG. 5, a schematic structural diagram of a cloud server disclosed in an embodiment of the present application, the cloud server is associated with at least one shared device, where the cloud server has multiple cloud password databases, and each cloud password database corresponds to one shared device. The cloud server includes:

The first obtaining unit 301 is configured to acquire a device identity of the shared device to be used input by the user, and determine a corresponding cloud password database according to the device identity;

Each of the shared devices has a unique device identity.

The second obtaining unit 302 is configured to acquire user information input by the user and demand information about the shared device to be used;

The selecting unit 303 is configured to select a cloud cipher group from the cloud cipher pool, and record the cloud cipher group and the user information in a correspondence relationship;

Therefore, the selecting unit 303 performs the process specifically: first determining a plurality of cloud cipher groups corresponding to the shared device to be used, and secondly, determining a user level according to the user information, and determining a corresponding cloud cipher group according to the user level.

The extracting unit 304 is configured to extract a password corresponding to the requirement information from the cloud cipher group;

The feedback unit 305 is configured to feed back the password to the user, so that when the user uses the shared device to be used, the password is used by the shared device to be used, and the password is used from the device-side password library. It is found whether the password with the same password is stored, and if yes, the required information of the user is determined by using the found password and the preset password generation rule, and the synchronization verification of the password is completed.

In summary, the cloud server disclosed in the present application uses the same preset password generation rule by using the password in the cloud password database corresponding to the shared device in the cloud server and the password in the device password database of the shared device. Before using the shared device, the user can use the information about the device to be used. First, the corresponding password is extracted from the cloud password database. The password is obtained by using the preset password generation rule in advance, and then the password is input to the shared device. When the shared device finds the password corresponding to the password from its own device-side password database, it can use the found password and the preset password generation rule to determine the user's demand information, thereby completing the synchronization verification of the password. Therefore, the present application implements a password synchronization verification process between a user and a shared device based on the same password generation rule in the case that the cloud server and the shared device do not need to connect to the network, so that the use of the shared device is no longer affected. Network restrictions, which effectively avoid the risk of Internet insecure attacks.

In the above embodiment, when the cloud server provides the password to the user after the user completes the payment,

The extracting unit 304 includes:

For the correspondence between the fee, the password, the cloud cipher group and the cloud cipher library, refer to the schematic diagram and related description shown in FIG. 2 .

The correspondence between the cloud server and the shared device can be seen in FIG. 3 and related description, and is not traced here.

To further optimize the above embodiment, the second extraction subunit is specifically used to:

The feedback unit 305 is specifically configured to:

Transmitting the password to the user, so that when the user uses the shared device to be used, the shared device that uses the shared device uses the password to search whether it is stored from its own device-side password database. The same password as the password, and if so, the user level and requirement information of the user is determined, and the synchronization verification of the password is completed.

Referring to FIG. 6 , a schematic diagram of a shared device disclosed in an embodiment of the present disclosure, such as a shared bicycle, a shared electric vehicle, a shared washing machine, and the like, the shared device includes:

The third obtaining unit 401 is configured to obtain a password obtained by the user in the cloud password database, where the password is a password obtained by using a preset password generation rule for the requirement information, and the demand information is that the user shares the to-be-used Equipment demand information;

The searching unit 402 is configured to use, by using the password, to search, from its own device-side password database, whether the same password as the password is stored;

The verification unit 403 is configured to determine the requirement information of the user by using the found password and the preset password generation rule, and complete synchronization verification of the password.

The cloud cryptographic database includes a plurality of cloud cipher groups, and each cloud cipher group corresponds to one user, and each cloud cipher group is all generated according to a preset password generation rule for a shared device in a different combination of working conditions. a set of passwords; the device-side password library includes a plurality of device-side password groups, each device-side password group corresponding to one user, and all passwords stored in the device-side password library of each shared device and corresponding to the shared device The passwords in the cloud password database are generated by using the same preset password generation rules for the user's demand information. In this way, the shared device can determine the user's demand information according to the password obtained by the user from the cloud password database.

In summary, the shared device disclosed in the present application uses the same preset password generation rule by using the password in the cloud password database corresponding to the shared device in the cloud server and the password in the device password database of the shared device. Before using the shared device, the user can use the information about the device to be used. First, the corresponding password is extracted from the cloud password database. The password is obtained by using the preset password generation rule in advance, and then the password is input to the shared device. When the shared device finds the password corresponding to the password from its own device-side password database, it can use the found password and the preset password generation rule to determine the user's demand information, thereby completing the synchronization verification of the password. Therefore, the present application implements a password synchronization verification process between a user and a shared device based on the same password generation rule in the case that the cloud server and the shared device do not need to connect to the network, so that the use of the shared device is no longer affected. Network restrictions, which effectively avoid the risk of Internet insecure attacks.

In order to further optimize the foregoing embodiment, the method further includes: an output unit, configured to output prompt information when the password is the same as the password, and the prompt information is used to prompt the user to re-enter the password. .

Therefore, to further optimize the foregoing embodiment, the searching unit 402 can be specifically used to:

The searching unit 402 can also be specifically used to:

Therefore, when the same password as the password is found in the device-side cipher group that has been generated by the device-side cipher library, the verification unit 403 is specifically configured to:

Therefore, the shared device also includes:

To further optimize the above embodiment, the shared device further includes:

The present application further provides a password verification system for a shared device, the system includes the cloud server and the at least one shared device described above, wherein the working principle of the system can be found in the corresponding part of the cloud server and the shared device. I won't go into details here.

It should be noted that the specific working principles of the components in the shared device, the cloud server, and the password authentication system are described in the corresponding parts of the method embodiment, and are not described here.

Finally, it should also be noted that in this context, relational terms such as first and second are used merely to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply these entities. There is any such actual relationship or order between operations. Furthermore, the term "comprises" or "comprises" or "comprises" or any other variations thereof is intended to encompass a non-exclusive inclusion, such that a process, method, article, or device that comprises a plurality of elements includes not only those elements but also Other elements, or elements that are inherent to such a process, method, item, or device. An element that is defined by the phrase "comprising a ..." does not exclude the presence of additional equivalent elements in the process, method, item, or device that comprises the element.

The various embodiments in the present specification are described in a progressive manner, and each embodiment focuses on differences from other embodiments, and the same similar parts between the various embodiments may be referred to each other.

The above description of the disclosed embodiments enables those skilled in the art to make or use the application. Various modifications to these embodiments are obvious to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the application. Therefore, the application is not limited to the embodiments shown herein, but is to be accorded the broadest scope of the principles and novel features disclosed herein.

Claims

A password verification method for a shared device, which is characterized in that it is applied to a cloud server, and the cloud server has a plurality of cloud cryptographic databases, each of which corresponds to a shared device, and the password verification method of the shared device includes:

Obtaining a device identity of the shared device to be used input by the user, and determining a corresponding cloud password database according to the device identity;

Obtaining user information input by the user and demand information about the shared device to be used;

Selecting a cloud cipher group from the cloud cipher library, and recording the cloud cipher group and the user information in a correspondence relationship;

Extracting a password corresponding to the requirement information from the cloud cipher group, where the password is a password obtained by using a preset password generation rule for the demand information in advance;

And returning the password to the user, so that when the user uses the shared device to be used, the shared device that uses the shared device uses the password to find out whether the device and the password are stored. The password with the same password is used, and if yes, the required information of the user is determined by using the found password and the preset password generation rule, and the synchronization verification of the password is completed.
The password verification method of the shared device according to claim 1, wherein the cloud password database comprises a plurality of cloud password groups, each cloud password group corresponds to one user, and each cloud password group is according to a preset password. The generation rule is a collection of all passwords generated by the shared device under the permutation combination of different working conditions.
The method for verifying a password of a shared device according to claim 1, wherein the device-side password library comprises a plurality of device-side password groups, each device-side password group corresponds to one user, and each shared device is on the device side. All the passwords stored in the password library and the passwords in the cloud password database corresponding to the shared device are generated by using the same preset password generation rules for the user's demand information.
The method for verifying a password of a shared device according to claim 1, wherein when the cloud server provides a password to the user after the user completes the payment, the cloud server extracts the location from the cloud cipher group. The password corresponding to the demand information includes:

Extracting, from the cloud cipher group, a fee corresponding to the demand information that needs to be paid by the user;

After detecting that the user has paid the fee, the password corresponding to the demand information is extracted from the cloud cipher group.
The password verification method of the shared device according to claim 4, wherein after detecting that the user has paid the fee, the password corresponding to the demand information is extracted from the cloud cipher group, specifically including :

After detecting that the user has paid the fee, extracting a password corresponding to the demand information from the cloud cipher group, and marking a user level, wherein when a plurality of users need to pay a fee, the user The level is determined according to the order in which the users complete the payment, and the higher the time for the user to complete the payment, the higher the corresponding user level;

And returning the password to the user, so that when the user uses the shared device to be used, the shared device that uses the shared device uses the password to find out whether the device and the password are stored. The password with the same password is used to determine the required information of the user by using the found password, and the synchronization verification of the password is completed, which specifically includes:

And returning the password to the user, so that when the user uses the shared device to be used, the shared device that uses the shared device uses the password to find out whether the device and the password are stored. The password with the same password is used. If yes, the user level and requirement information of the user is determined, and the synchronization verification of the password is completed.
The method for verifying a password of a shared device according to claim 1, wherein all cloud cipher groups in the cloud cipher pool and all device cipher groups in the device cipher pool use the same cipher classification scheme .
A password verification method for a shared device, which is applied to a shared device to be used, and the password verification method of the shared device includes:

Obtaining a password obtained by the user in the cloud password database, where the password is a password obtained by using a preset password generation rule for the requirement information, where the requirement information is demand information of the user to the shared device to be used;

Using the password to find out from its own device side password database whether the same password as the password is stored;

If yes, determining the demand information of the user by using the found password and the preset password generation rule, and completing synchronization verification of the password.
The password verification method of the shared device according to claim 7, wherein the cloud password database comprises a plurality of cloud password groups, each cloud password group corresponds to one user, and each cloud password group is according to a preset password. The generation rule is a collection of all passwords generated by the shared device under the permutation combination of different working conditions.
The method for verifying a password of a shared device according to claim 7, wherein the device-side password library comprises a plurality of device-side password groups, each device-side password group corresponds to one user, and each shared device is on the device side. All the passwords stored in the password library and the passwords in the cloud password database corresponding to the shared device are generated by using the same preset password generation rules for the user's demand information.
The method for verifying a password of a shared device according to claim 7, wherein the password is used to search for a password that is the same as the password by using the password of the device, and the password includes:

Searching, by using the password, from the device-side cipher group placed in the valid password reservation area of the device-side cipher library of the device, whether to store the same password as the password, wherein the valid password reservation area is used to reserve the A password that has been obtained but not used by the shared device.
The method for verifying a password of a shared device according to claim 7, wherein the password is used to search for a password that is the same as the password by using the password of the device, and the password includes:

When the same password as the password is not found from the valid password reservation area of the device-side password bank of the device, the device-side password group that has been generated by the device-side password library is searched for whether the password is stored. The same password.
The method for verifying a password of a shared device according to claim 7, wherein a password equal to the password is found in a device-side cipher group that has been generated from the device-side cipher library, and the level of the cloud cipher group is When the level of the device-side cipher group is the same as the user-level cipher, the queried password and the preset cipher generation rule are used to determine the demand information of the user, and the synchronization verification of the password is completed, which specifically includes:

Determining the user level and requirement information of the user by using the found password and the preset password generation rule, and completing synchronization verification of the password.
The password verification method of the shared device according to claim 12, further comprising: after completing the synchronization verification of the password, further comprising:

Putting an unused device-side cipher group of a higher level than the user level into the valid password reservation area;

Delete all device-side cipher groups whose level is lower than the user level.
The password authentication method of the shared device according to claim 7, wherein after determining the user's demand information and completing the synchronization verification of the password, the method further includes:

The password that verified the success is deleted.
The password verification method of the shared device according to claim 7, further comprising:

When the same password as the password is not found from the device-side password library, prompt information is output, and the prompt information is used to prompt the user to re-enter the password.
A cloud server, wherein the cloud server has a plurality of cloud cryptographic libraries, and each cloud cryptographic library corresponds to a shared device, and the cloud server includes:

a first acquiring unit, configured to acquire a device identity of the shared device to be used by the user, and determine a corresponding cloud password database according to the device identity;

a second acquiring unit, configured to acquire user information input by the user and demand information about the shared device to be used;

a selecting unit, configured to select a cloud cipher group from the cloud cipher pool, and record the cloud cipher group and the user information in a correspondence relationship;

An extracting unit, configured to extract a password corresponding to the requirement information from the cloud cipher group, where the password is a password obtained by using a preset password generating rule in advance for the demand information;

a feedback unit, configured to feed back the password to the user, so that when the user uses the shared device to be used, the shared device uses the password to search from its own device-side password database. Whether the password with the same password is stored, and if yes, determining the demand information of the user by using the found password and the preset password generation rule, and completing synchronization verification of the password.
The cloud server according to claim 16, wherein the cloud cryptographic library comprises a plurality of cloud cipher groups, each cloud cipher group corresponding to one user, and each cloud cipher group is configured to share according to a preset password generation rule. A collection of all passwords generated by the device under a permutation combination of different operating conditions.
The cloud server according to claim 16, wherein the device side password library comprises a plurality of device side password groups, each device side password group corresponds to one user, and each shared device is stored in the device side password library. All passwords and passwords in the cloud cryptographic library corresponding to the shared device are generated by using the same preset password generation rules for the user's demand information.
The cloud server according to claim 16, wherein when the cloud server provides a password to the user after the user completes the payment, the extracting unit includes:

a first extracting subunit, configured to extract, from the cloud cipher group, a fee corresponding to the demand information that needs to be paid by the user;

a second extracting subunit, configured to: after detecting that the user has paid the fee, extract a password corresponding to the demand information from the cloud cipher group.
The cloud server according to claim 19, wherein the second extraction subunit is specifically configured to:

After detecting that the user has paid the fee, extracting a password corresponding to the demand information from the cloud cipher group, and marking a user level, wherein when a plurality of users need to pay a fee, the user The level is determined according to the order in which the users complete the payment, and the higher the time for the user to complete the payment, the higher the corresponding user level;

The feedback unit is specifically configured to:

And returning the password to the user, so that when the user uses the shared device to be used, the shared device that uses the shared device uses the password to find out whether the device and the password are stored. The password with the same password is used. If yes, the user level and requirement information of the user is determined, and the synchronization verification of the password is completed.
The cloud server according to claim 16, wherein all cloud cipher groups in the cloud cipher pool and all device cipher groups in the device cipher library adopt the same cipher classification scheme.
A shared device, comprising:

a third obtaining unit, configured to acquire a password obtained by the user in the cloud password database, where the password is a password obtained by using a preset password generation rule for the requirement information, where the demand information is that the user uses the shared device to be used. Demand information;

a searching unit, configured to use, by using the password, to find, from its own device-side password database, whether a password with the same password is stored;

The verification unit is configured to determine the user's demand information by using the found password and the preset password generation rule, and complete synchronization verification of the password.
The sharing device according to claim 22, wherein the cloud cryptographic library comprises a plurality of cloud cipher groups, each cloud cipher group corresponding to one user, and each cloud cipher group is configured to share according to a preset password generation rule. A collection of all passwords generated by the device under a permutation combination of different operating conditions.
The sharing device according to claim 22, wherein the device-side password library comprises a plurality of device-side password groups, each device-side password group corresponds to one user, and each shared device is stored in the device-side password library. All passwords and passwords in the cloud cryptographic library corresponding to the shared device are generated by using the same preset password generation rules for the user's demand information.
The sharing device according to claim 22, wherein the searching unit is specifically configured to:

Searching, by using the password, from the device-side cipher group placed in the valid password reservation area of the device-side cipher library of the device, whether to store the same password as the password, wherein the valid password reservation area is used to reserve the A password that has been obtained but not used by the shared device.
The sharing device according to claim 22, wherein the searching unit is specifically configured to:

When the same password as the password is not found from the valid password reservation area of the device-side password bank of the device, the device-side password group that has been generated by the device-side password library is searched for whether the password is stored. The same password.
The sharing device according to claim 22, wherein the same password as the password is found in the device-side cipher group that has been generated from the device-side cipher library, and the level of the cloud cipher group and the device-side password are obtained. When the level of the group is consistent with the user level, the verification unit is specifically used to:

Determining the user level and requirement information of the user by using the found password and the preset password generation rule, and completing synchronization verification of the password.
The sharing device according to claim 27, further comprising:

a placing unit, configured to: after the synchronization verification of the password is completed, put an unused device-side cipher group of a level higher than the user level into the valid password reservation area;

The first deleting unit is configured to delete all device-side cipher groups whose level is lower than the user level.
The sharing device according to claim 22, further comprising:

The second deleting unit is configured to delete the password that is successfully verified after determining the user's requirement information and completing the synchronization verification of the password.
The sharing device according to claim 22, further comprising:

And an output unit, configured to output prompt information when the password is the same as the password, and the prompt information is used to prompt the user to re-enter the password.
A password authentication system for a shared device, comprising the cloud server according to any one of claims 16 to 21 and at least one shared device according to claims 22 to 30.